Supporting XML security models using relational databases: A vision

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 2824, Issue , 2003, Pages 267-281

  Lee, Dongwon ^a   Lee, Wang Chien ^a   Liu, Peng ^a  

^a PENNSYLVANIA STATE UNIVERSITY   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

ACCESS CONTROL; HYPERTEXT SYSTEMS; QUERY PROCESSING; SECURITY OF DATA; WORLD WIDE WEB;

EXTENSIBLE MARK-UP LANGUAGE (XML); QUERY EVALUATION; RELATIONAL CONVERSION; RELATIONAL DATABASE; SECURITY ASPECTS; SECURITY CHECKS; SECURITY MODEL; XML SECURITY;

XML;

EID: 35248856444     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/978-3-540-39429-7_18     Document Type: Article

References (26)

1. S. Banerjee, V. Krishnamurthy, M. Krishnaprasad, and R. Murthy. "Oracle8i - The XML Enabled Data Management System.". In IEEE ICDE, San Diego, CA, Feb. 2000.
2. E. Bertino and E. Ferrari. "Secure and Selective Dissemination of XML Documents". IEEE Trans. on Information and System Security (TISSEC), 5(3):290-331, Aug. 2002.
3. R. Bourret. "XML and Databases". Web page, Sep. 1999. http://www.rpbourret.com/xml/XMLAndDatabases.htm.
4. T. Bray, J. Paoli, and C. M. Sperberg-McQueen (Eds). "Extensible Markup Language (XML) 1.0 (2nd Edition)". W3C Recommendation, Oct. 2000. http://www.w3.org/TR/2000/REC-xml-20001006.
5. J. M. Cheng and J. Xu. "XML and DB2". In IEEE ICDE, San Diego, CA, Feb. 2000.
6. E. Damiani, S. De Capitani di Vimercati, S. Paraboschi, and P. Samarati. "A Fine-Grained Access Control System for XML Documents". IEEE Trans. on Information and System Security (TISSEC), 5(2):169-202, May 2002.
7. E. Damiani, S. De Capitani Di Vimercati, S. Paraboschi, and P. Samarati. "Design and Implementation of an Access Control Processor for XML Documents". Computer Networks, 33(6):59-75, 2000.
8. A. Deutsch, M. F. Fernandez, and D. Suciu. "Storing Semistructured Data with STORED". In ACM SIGMOD, Philadephia, PA, Jun. 1998.
9. E. Fernandez, E. Gudes, and H. Song. "A Model of Evaluation and Administration of Security in Object-Oriented Databases". IEEE Trans. on Knowledge and Data Engineering (TKDE), 6(2):275-292, 1994.
10. D. Florescu and D. Kossmann. "Storing and Querying XML Data Using an RDBMS". IEEE Data Eng. Bulletin, 22(3):27-34, Sep. 1999.
11. S. Godik and T. Moses (Eds). "eXtensible Access Control Markup Language (XACML) Version 1.0". OASIS Specification Set, Feb. 2003. http://www.oasis-open.org/committees/xacml/repository/.
12. P. P. Griffiths and B. W. Wade. "An Authorization Mechanism for a Relational Database System". ACM Trans. on Database Systems (TODS), 1(3):242-255, Sep. 1976.
13. S. Jajodia, P. Samarati, M. L. Sapino, and V. S. Subrahmanian. "Flexible Support for Multiple Access Control Policies". ACM Trans. on Database Systems (TODS), 26(2):214-260, Jun. 2001.
14. S. Jajodia, P. Samarati, V. S. Subrahmanian, and E. Bertino. "A Unified Framework for Enforcing Multiple Access Control Policies". In ACM SIGMOD, pages 474-485, May 1997.
15. S. Jajodia and R. Sandhu. "Toward a Multilevel Secure Relational Data Model". In ACM SIGMOD, May 1990.
16. D. Lee and W. W. Chu. "Constraints-preserving Transformation from XML Document Type Definition to Relational Schema". In Int'l Conf. on Conceptual Modeling (ER), pages 323-338, Salt Lake City, UT, Oct. 2000.
17. W.-C. Lee, G. Mitchell, and X. Zhang. "Integrating XML Data with Relational Databases". In IEEE Int'l Workshop on Knowledge Discovery and Data Mining in World Wide Web, Taipei, Taiwan, Apr. 2000.
18. F. Rabitti, E. Bertino, and G. Ahn. "A Model of Authorization for Next-Generation Database Systems". ACM Trans. on Database Systems (TODS), 16(1):89-131, 1991.
19. P. Samarati, E. Bertino, and S. Jajodia. "An Authorization Model for a Distributed Hypertext System". IEEE Trans. on Knowledge and Data Engineering (TKDE), 8(4):555-562, 1996.
20. R. Sandhu and F. Chen. "The Multilevel Relational (MLR) Data Model". IEEE Trans. on Information and System Security (TISSEC), 1(1), 1998.
21. R. Sandhu, E. Coyne, H. Feinstein, and C. Youman. "Role-Based Access Control Models". IEEE Computer, 29(2), 1996.
22. J. Shanmugasundaram, K. Tufte, G. He, C. Zhang, D. DeWitt, and J. Naughton. "Relational Databases for Querying XML Documents: Limitations and Opportunities". In VLDB, Edinburgh, Scotland, Sep. 1999.
23. K.-L. Tan, M. L. Lee, and Y. Wang. "Access Control of XML Documents in Relational Database Systems". In Int'l Conf. on Internet Computing (IC), Las Vegas, NV, Jun. 2001.
24. M. Winslett, K. Smith, and X. Qian. "Formal Query Languages for Secure Relational Databases". ACM Trans. on Database Systems (TODS), 19(4):626-662, 1994.
25. M. Yoshikawa, T. Amagasa, T. Shimura, and S. Uemura. "XReI: A Path-Based Approach to Storage and Retrieval of XML Documents using Relational Databases". ACM Trans. on Internet Technology (TOIT), 1(2):110-141, Nov. 2001.
26. T. Yu, D. Srivastava, L. V.S. Lakshmanan, and H. V. Jagadish. "Compressed Accessibility Map: Efficient Access Control for XML". In VLDB, Hong Kong, China, 2002.