Specifying access control policies for XML documents with XPath

Proceedings of ACM Symposium on Access Control Models and Technologies (SACMAT 2002)

Volumn 9, Issue , 2004, Pages 61-69

  Fundulaki, Irini ^a   Marx, Maarten ^b  

^a LUCENT TECHNOLOGIES   (United States)

^b UNIVERSITY OF AMSTERDAM   (Netherlands)

Author keywords

XML; XML access control; XPath

Indexed keywords

ALGORITHMS; DATABASE SYSTEMS; INFORMATION RETRIEVAL SYSTEMS; NATURAL LANGUAGE PROCESSING SYSTEMS; PUBLIC POLICY; QUERY LANGUAGES; SECURITY OF DATA; SEMANTICS; SERVERS;

BUILT-IN-SECURITY; DIRECTORY SERVERS; XML ACCESS CONTROL; XPATH;

XML;

EID: 4143058056     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/990036.990046     Document Type: Conference Paper

References (27)

1. Third Generation Partnership Project. http://3gpp.org.
2. S. Abiteboul, P. Buneman, and D. Suciu. Data On the Web: From Relations to Semistructured Data and XML. Morgan Kaufmann Publishers, October 1999.
3. The Andrew File System (AFS). http://www.psc.edu/general/filesys/afs/afs. html.
4. M. Benedikt, W. Fan, and G. Kuper. Structural Properties of XPath Fragments. In ICDT, Siena, Italy, January 2003.
5. E. Bertino, S. Castano, and E. Ferrari. On Specifying Security Policies for Web Documents with an XML-based language. In SACMAT, Chantilly, Virginia, USA, May 2001.
6. E. Bertino, S. Castano, and E. Ferrari. Securing XML Documents: The Author-X Project Demonstration. In SIGMOD, Santa Barbara, California, USA, May 2001.
7. E. Bertino, S. Castano, E. Ferrari, and M. Mesiti. Specifying and Enforcing Access Control Policies for XML Document Sources. WWW, 3(3), 2000.
8. E. Bertino, S. Castano, E. Ferrari, and M. Mesiti. Protection and administration of XML data sources. DKE, 43(3):237-260, 2002.
9. E. Bertino and E. Ferrari. Secure and Selective Dissemination of XML Documents. TISSEC, 5(3):290-331, 2002.
10. S. Boag, D. Chamberlin, M. Fernandez, D. Florescu, J. Robie, and J. Simeon. XQuery: A Query Language for XML. http://www.w3.org/TR/xquery, November 2003.
11. S. Cho, S. Amer-Yahia, L. V. S. Lakshmanan, and D. Srivastava. Optimizing the Secure Evaluation of Twig Queries. In VLDB, Hong Kong, China, September 2002.
12. J. Clark and S. DeRose (eds.). XML Path Language (XPath) Version 1.0. W3C Recommendation, November 1999. http://www.w3c.org/TR/xpath.
13. E. Damiani, S. De Capitani di Vimercati, S. Paraboschi, and P. Samarati. Securing XML Documents. In EDBT, Kostanz, Germany, March 2000.
14. E. Damiani, S. De Capitani di Vimercati, S. Paraboschi, and P. Samarati. A Fine-Grained Access Control System for XML Documents. TISSEC, 5(2):169-202, May 2002.
15. J. Clark (ed.). XSL Transformation (XSLT) Version 1.0. W3C Recommendation, November 1999. http://www.w3c.org/TR/xslt.
16. W. Fan, C-Y. Chan, and M. Garofalakis. Secure XML Querying with Security Views. In SIGMOD, 2004. To appear.
17. A. Gabillon and E. Bruno. Regulating Access to XML Documents. In Working Conference on Database and Application Security, July 2001.
18. S. Godik and T. Moses (eds). extensible Access Control Markup Language (XACML) Version 1.0. OASIS Standard, 2003 February.
19. G. Gottlob, C. Koch, and R. Pichler. The complexity of XPath query evaluation. In PODS, pages 179-190, San Diego, California, USA, June 2003.
20. S. Jajodia, P. Samarati, V. Subrahmanian, and E. Bertino. A Unified Framework for Enforcing Multiple Access Control Policies. In SIGMOD, Tuscon, Arizona, USA, May 1997.
21. Liberty Alliance Project. http://www.projectliberty.org.
22. M. Marx. XPath with conditional axis relations. In EDBT, pages 477-494, Crete, Greece, March 2004.
23. M. Murata, A. Tozawa, and M. Kudo. XML Access Control using Static Analysis. In CCS, Washington, DC, USA, October 2003.
24. A. Silberschatz, G. Gaqne, and P. Galvin. Operating System Concepts. John Wiley and Sons, 2002.
25. D. Srivastava. Directories: Managing Data for Networked Applications. In ICDE, Los Alamos, California, USA, March 2000. Tutorial.
26. H. Thompson, D. Beech, M. Maloney, and N. Mendelsohn (eds.). XML Schema Part 1 Structures. http://www.w3.org/TR/xmlschema-l, May 2001.
27. XML Access Control. http://www.trl.ibm.com/projects/xml/xacl/.