Access control and audit model for the multidimensional modeling of data warehouses

Decision Support Systems

Volumn 42, Issue 3, 2006, Pages 1270-1289

  Fernández Medina, Eduardo ^a   Trujillo, Juan ^b   Villarroel, Rodolfo ^c   Piattini, Mario ^a  

^a UNIVERSITY OF CASTILLA LA MANCHA   (Spain)

^b UNIVERSITY OF ALICANTE   (Spain)

^c UNIVERSIDAD CATÓLICA DEL MAULE   (Chile)

Author keywords

Access control; Audit; Data warehouses; Secure multidimensional modeling; UML

Indexed keywords

COMPUTER PROGRAMMING LANGUAGES; CONTROL SYSTEMS; DATA REDUCTION; INFORMATION ANALYSIS; MATHEMATICAL MODELS; SECURITY OF DATA;

ACCESS CONTROL AND AUDIT (ACA) MODEL; SECURE MULTIDIMENSIONAL (MD) MODELING; UNIFIED MODELING LANGUAGE (UML);

DATA WAREHOUSES;

EID: 33749603462     PISSN: 01679236     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.dss.2005.10.008     Document Type: Article

References (52)

1. Abelló A., Samos J., and Saltor F. A framework for the classification and description of multidimensional data models. 12th International Conference on Database and Expert Systems Applications (DEXA'01) (2001), Springer-Verlag, Munich, Germany LNCS 2113
2. Abelló A., Samos J., and Saltor F. YAM2 (Yet another multidimensional model): an extension of UML. International Database Engineering and Applications Symposium (IDEAS 2002) (2002), IEEE Computer Society, Edmonton, Canada
3. Atluri V., and Huang W.-K. An authorization model for workflows. 5th European Symposium on Research in Computer Security (1996), Springer Verlag Rome, Italy
4. Bertino E., Jajodia S., and Samarati P. A flexible authorization mechanism for relational data management systems. ACM Transactions on Information Systems 17 (April 1999)
5. Blaschka M., Sapia C., Höfling G., and Dinter B. Finding your way through multidimensional data models. 9th Intl. Conference on Database and Expert Systems Applications (DEXA'98) (1998), Springer-Verlag, Vienna, Austria
6. Bolloju N., Khalifa M., and Turban E. Integrating knowledge management into enterprise environments for the next generation decision support. Decision Support Systems 33 2 (June 2002)
7. Bonatti P., Damiani E., De Capitani di Vimercati S., and Samarati P. An access control model for data archives. IFIP-TC11 International Conference on Information Security, (Paris, France) (2001)
8. Cota S. For Certain Eyes Only. DB2 Magazine 9 1 (2004)
9. Damiani E., De Capitani di Vimercati S., Fernández-Medina E., and Samarati P. An access control system for SVG documents. In: Gudes E., and Shenoi S. (Eds). Research Directions in Data and Applications Security (2002), Kluwer Academic Publisher, Boston
10. Damiani E., De Capitani di Vimercati S., Paraboschi S., and Samarati P. A fined-grained access control system for XML documents. ACM Transactions on Information and Systems Security 5 (May 2002)
11. Devanbu P., and Stubblebine S. Software engineering for security: a roadmap. In: Finkelstein A. (Ed). The Future of Software Engineering (2000), ACM Press
12. Dhillon G., and Backhouse J. Information system security management in the new millennium. Communications of the ACM 43 7 (2000)
13. Fernández-Medina E., and Piattini M. Designing secure database for OLS. Database and Expert Systems Applications: 14th International Conference (DEXA 2003) (2003), Springer, Prague, Czech Republic LNCS 2736
14. Fernández-Medina E., and Piattini M. Extending OCl for secure database design. International Conference on the Unified Modeling Language (UML 2004) (2004), Springer-Verlag, Lisbon, Portugal LNCS 3273
15. Fernández-Medina E., Trujillo J., Villarroel R., and Piattini M. Extending the uML for designing secure data warehouses. International Conference on Conceptual Modeling (ER 2004) (2004), Springer-Verlag, Shangai, China LNCS 3288
16. Ferrari E., and Thuraisingham B. Secure database systems. In: Piattini M., and Díaz O. (Eds). Advanced Databases: Technology Design (2000), Artech House, London
17. Gogolla M., and Henderson-Sellers B. Analysis of uML stereotypes within the UML metamodel. 5th International Conference on the Unified Modeling Language-The Language and its Applications (2002), Springer, Dresden, Germany LNCS 2460
18. Golfarelli M., Maio D., and Rizzi S. The dimensional fact model: a conceptual model for data warehouses. International Journal of Cooperative Information Systems 7 2-3 (1998)
19. Hall A., and Chapman R. Correctness by construction: developing a commercial secure system. IEEE Software 19 1 (January/February 2002)
20. Husemann B., Lechtenborger J., and Vossen G. Conceptual data warehouse design. Proceedings of the 2nd. International Workshop on Design and Management of Data Warehouses, Technical University of Aachen (RWTH), (Stockholm, Sweden) (2000)
21. Inmon H. Building the Data Warehouse. 3rd ed. (2002), John Wiley & Sons, USA
22. Jajodia S., and Sandhu R. Toward a multilevel secure relational data model. ACM SIGMOD International Conference on Management Data, (Denver, Colorado) (1991)
23. Jajodia S., and Sandhu R. Polyinstantiation for cover stories. Second European Symposium on Research in Computer Security, (Toulouse, France) (1992)
24. Jajodia S., Samarati P., Sapino M.L., and Subrahmanian V.S. Flexible support for multiple access control policies. ACM Transactions on Database Systems 26 (June 2001)
25. Jürjens J. UMLsec: extending uML for secure systems development. In: Jézéquel J., Hussmann H., and Cook S. (Eds). UML 2002-The Unified Modeling Language, Model Engineering, Concepts and Tools (2002), Springer, Dresden, Germany
26. Katic N., Quirchmayr G., Schiefer J., Stolba M., and Min Tjoa A. A Prototype Model for Data Warehouse Security Based on Metadata. 9th International Workshop on Database and Expert Systems Applications (DEXA'98) (1998), IEEE Computer Society, Vienna, Austria
27. Kimball R., and Ross M. The Data Warehousing Toolkit. 2nd ed. (2002), John Wiley
28. Kirkgöze R., Katic N., Stolda M., and Min Tjoa A. A security concept for OLAP. 8th International Workshop on Database and Expert System Applications (DEXA'97) (1997), IEEE Computer Society, Toulouse, France
29. Levinger J. Oracle label security. Administrator's guide. Release 2 9.2 (2002). http://www.csis.gvsu.edu/GeneralInfo/Oracle/network.920/a96578.pdf (http://www.csis.gvsu.edu/GeneralInfo/Oracle/network.920/a96578.pdf)
30. Lodderstedt T., Basin D., and Doser J. SecureUML: a UML-based modeling language for model-driven security. The Unified Modeling Language Conference (2002), Springer, Dresden, Germany LNCS 2460
31. Luján-Mora S., Trujillo J., and Song I.Y. Extending the UML for multidimensional modeling. 5th International Conference on the Unified Modeling Language (UML 2002) (2002), Springer-Verlag, Dresden, Germany LNCS 2460
32. Luján-Mora S., Trujillo J., and Song I.Y. Multidimensional modeling with UML package diagrams. International Conference on Conceptual Modeling-ER 2002 (2002), Springer, Tampere, Finland LNCS 2503
33. Marks D., Sell P., and Thuraisingham B. MOMT: a multi-level object modeling technique for designing secure database applications. Journal of Object-Oriented Programming 9 4 (1996)
34. A. Nanda, Keeping Information Private with VPD, Oracle, XVIII(2) (March/April, 2004).
35. Nemati H., Steiger D., Iyer L., and Herschel R. Knowledge warehouse: an architectural integration of knowledge management, decision support, artificial intelligence and data warehousing. Decision Support Systems 33 2 (June 2002)
36. Priebe T., and Pernul G. A pragmatic approach to conceptual modeling of OLAP security. 20th Int. Conference on Conceptual Modeling (2001), Springer-Verlag, Yokohama, Japan
37. Rabitti F., Bertino E., Kim W., and Woelk D. A model of authorization for next-generation database systems. ACM Transactions on Database Systems 16 1 (1991)
38. Rosenthal A., and Sciore E. View security as the basic for data warehouse security. 2nd International Workshop on Design and Management of Data Warehouse, (Sweden) (2000)
39. Samarati P., and De Capitani di Vimercati S. Access control: policies, models, and mechanisms. In: Focardi R., and Gorrieri R. (Eds). Foundations of Security Analysis and Design (2000), Springer, Bertinoro, Italy
40. Samarati P., Bertino E., and Jajodia S. An authorization model for a distributed hypertext system. IEEE Transactions on Knowledge and Data Engineering 8 4 (August 1996)
41. Sandhu R., and Chen F. The multilevel relational data model. ACM Transactions on Information and Systems Security (TISSEC) 1 1 (June 1998)
42. Sandhu R., and Samarati P. Authentication, access control, and intrusion detection. In: Tucker A. (Ed). CRC Handbook of Computer Science and Engineering (1997), CRC Press Inc
43. Sapia C., Blaschka M., Höfling G., and Dinter B. Extending the E/R model for the multidimensional paradigm. 1st International Workshop on Data Warehouse and Data Mining (DWDM'98) (1998), Springer-Verlag, Singapore
44. Shim P., Warkentin M., Courtney J.F., Power D.J., Sharda R., and Carlsson C. Past, present, and future of decision support technology. Decision Support Systems 33 2 (June 2002)
45. Sirer E.G., and Wang K. An access control language for web services. 7th ACM Symposium on Access Control Models and Technologies (2002), ACM Press
46. Smith G.W. Modeling security-relevant data semantics. IEEE Transactions on Software Engineering 17 11 (1991)
47. Toval A., Nicolás J., Moros B., and García F. Requirement reuse for improving information systems security: a practitioner's approach. Requirement Engineering Journal 6 4 (2002)
48. J. Trujillo, M. Palomar, J. Gómez, I.Y. Song, Designing Data Warehouses with OO Conceptual Models, IEEE Computer, special issue on Data Warehouses, 34 (2001).
49. Tryfona N., Busborg F., and Christiansen J. starER: a conceptual model for data warehouse design. ACM 2nd International Workshop on Data Warehousing and OLAP (DOLAP'99) (1999), ACM, Missouri, USA
50. Wang L., Jajodia S., and Wijesekera D. Securing OLAP data cubes against privacy breaches. IEEE Symposium on Security and Privacy, (Berkeley, California) (2004)
51. Warmer J., and Kleppe A. The object constraint language second edition. Getting Your Models Ready for MDA (2003), Addison Wesley
52. Weippl E., Mangisengi O., Essmayr W., Lichtenberger F., and Winiwarter W. An authorization model for data warehouses and OLAP. Workshop on Security in Distributed Data Warehousing, (New Orleans, Louisiana, USA) (2001)