Abstracting and refining authorization in SQL

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 3178, Issue , 2004, Pages 148-162

  Rosenthal, Arnon ^a   Sciore, Edward ^a,b  

^a MITRE CORPORATION   (United States)

^b BOSTON COLLEGE   (United States)

Author keywords

Privilege Inference; SQL Authorization; Views

Indexed keywords

INFORMATION MANAGEMENT;

PRIVILEGE INFERENCE; SECURITY POLICY; SQL AUTHORIZATION; VIEWS;

ABSTRACTING;

EID: 35048835357     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/978-3-540-30073-1_11     Document Type: Article

References (19)

1. E. Bertino, P. Samarati, S. Jajodia, "An extended authorization model for relational databases", IEEE TKDE, 1997
2. E. Bertino, E. Ferrari, "Administration Policies in a Multipolicy Authorization System", Database Security XI - Status and Prospects, Proc. of Tenth Annual IFIP Working Conference on Database Security, 1997
3. R. Bhatti, E. Bertino, A. Ghafoor, J. Joshi, "XML-Based Specification for Web Services Document Security", IEEE Computer, April 2004.
4. S. Castano, S. De Capitani di Vimercati, M.G. Fugini, Automated Derivation of Global Authorizations for Database Federations, Journal of Computer Security, vol. 5, n. 4, 1997, pp. 271-301.
5. S. De Capitani di Vimercati, P. Samarati, "Authorization Specification and Enforcement in Federated Database Systems", Journal of Computer Security, vol. 5, n. 2, 1997, pp. 155-188.
6. S. Castano, M. Fugini, G. Martella, P. Samarati, Database Security, Addison-Wesley 1995.
7. Y. Cui, J. Widom, J. Weiner, "Tracing the lineage of view data in a warehousing environment" ACM Transactions on Database Systems (TODS) Volume 25 Issue 2 (June 2000)
8. E. Damiani, S. De Capitani di Vimercati, S. Paraboschi, P. Samarati, " A Fine-Grained Access Control System for XML Documents," ACM Transactions on Information and System Security (TISSEC), vol. 5, n. 2, May 2002, pp. 169-202.
9. R. Fagin, "On an Authorization Mechanism", ACM Transactions on Database Systems, Vol. 3, No. 3, September 1978, Pages 310-319.
10. E Gudes and MS Olivier, "Security Policies in Replicated and Autonomous Databases," in S. Jajodia (ed), Database Security XII: Status and Prospects, 93-107, Kluwer, 1999
11. S. Jajodia, P. Samarati, M. Sapino, V. S. Subrahmanian, "Flexible Support for Multiple Access Control Policies", ACM Trans. Database Systems, 2001.
12. D. Lomet "A Role for Research in the Database Industry" ACM Computing Surveys 28(4es), December 1996.
13. M. Negri, G. Pelagatti, L. Sbattella, "Formal Semantics of SQL Queries" ACM TODS 17(3), September 1991
14. F. Rabitti, E. Bertino, W. Kim, D. Woelk, "A model of authorization for next generation database systems", ACM Trans. Database Systems, 16(1) March 1991.
15. S. Rizvi, A. Mendelzon, S. Sudarshan, P. Roy "Extending Query Rewriting Techniques for Fine-Grained Access Control", ACM SIGMOD Conf., Paris, 2004.
16. A. Rosenthal, E. Sciore, "First-Class Views: A Key to User-Centered Computing", SIGMOD Record, Sept. 1999.
17. A. Rosenthal, E. Sciore, "View Security as the Basis for Data Warehouse Security", CAiSE Workshop on Design and Management of Data Warehouses, Stockholm, 2000.
18. SQL Standard, Part 2 (Foundations), ISO/IEC document 9075-2, 2003.
19. W. Yao, K. Moody, J. Bacon, "A model of OASIS role-based access control and its support for active security", ACM SACMAT Conf., Chantilly VA, 2001.