A role-based approach to access control for XML databases

Proceedings of ACM Symposium on Access Control Models and Technologies (SACMAT 2002)

Volumn 9, Issue , 2004, Pages 70-77

  Wang, Jingzhu ^a   Osborn, Sylvia L ^a  

^a UNIVERSITY OF WESTERN ONTARIO   (Canada)

Author keywords

Role based access control; XML databases

Indexed keywords

ALGORITHMS; COMPUTER ARCHITECTURE; COMPUTER SIMULATION; CRYPTOGRAPHY; DATABASE SYSTEMS; INFORMATION RETRIEVAL SYSTEMS; OBJECT ORIENTED PROGRAMMING; SECURITY OF DATA; USER INTERFACES;

ROLE GRAPH MODEL; ROLE-BASED ACCESS CONTROL; XML DATABASES; XPATH;

XML;

EID: 4143061356     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/990036.990047     Document Type: Conference Paper

References (21)

1. E. Bertino, S. Castano, E. Ferrari, and M. Mesiti. Specifying and enforcing access control policies for XML document sources. World Wide Web Journal, 3(3):139-151, 2000.
2. E. Bertino and E. Ferrari. Secure and selective dissemination of XML documents. ACM TISSEC, 5(3):290-331, 2002.
3. R. Bhatti, J. B. D. Joshi, A. Ghafoor, and E. Bertino. Access control in dynamic xml-based web-services with x-rbac. In First International Conference in Web Services, June 2003. Las Vegas.
4. S. Castano, M. Fugini, G. Martella, and P. Samarati. Database Security. Addison-Wesley, 1994.
5. E. Damiani, S. di Vimercati, S. Paraboschi, and P. Samarati. Design and implementation of an access control processor for XML documents. Computer Networks, 33(1-6):59-75, 2000.
6. E. Damiani, S. di Vimercati, S. Paraboschi, and P. Samarati. A fine-grained access control system for XML documents. ACM TISSEC, 5(2):169-202, 2002.
7. E. Damiani, P. Samarati, S. di Vimercati, and S. Paraboschi. Controlling access to XML documents. IEEE Internet Computing, 5(6):18-28, 2001.
8. D. Ferraiolo, R. Sandhu, S. Gavrila, D. Kuhn, and R. Chandramouli. Proposed NIST standard for role-based access control. ACM TISSEC, 4(3):224-275, 2001.
9. A. Gabillon and E. Bruno. Regulating access to XML documents. In Database and Application Security XV, pages 299-314. Kluwer, 2001.
10. M. Hitchens and V. Varadharajan. RBAC for XML document stores. In ICICS 2001, pages 131-143. Springer-Verlag, LNCS 2229, 2001.
11. C. M. Ionita and S. L. Osborn. Privilege administration for the role graph model. In Research Directions in Data and Applications Security, Proc. IFIP WG11.3 Working Conference on Database Security, pages 15-25. Kluwer Academic Publishers, 2003.
12. M. Kudo and S. Hada. XML document security based on provisional authorization. In Proc. 7th ACM Conference on Computer and Communications Security, pages 87-96, 2000.
13. M. Nyanchama. Commercial Integrity, Roles and Object Orientation. PhD thesis, Department of Computer Science, The University of Western Ontario, London, Canada, Sept. 1994.
14. M. Nyanchama and S. L. Osborn. The role graph model and conflict of interest. ACM TISSEC, 2(l):3-33, 1999.
15. S. Osborn and Y. Guo. Modeling users in role-based access control. In Fifth ACM Workshop on Role-Based Access Control, pages 31-38, Berlin, Germany, July 2000.
16. S. Osborn, R. Sandhu, and Q. Munawer. Configuring role-based access control to enforce mandatory and discretionary access control policies. ACM Trans. Information and System Security, 3(2):l-23, 2000.
17. F. Rabitti, E. Bertino, W. Kim, and D. Woelk. A model of authorization for next-generation database systems. ACM Trans Database Syst, 16(1):88-131, 1991.
18. F. Rabitti, D. Woelk, and W. Kim. A model of authorization for object-oriented and semantic databases. In Proceedings of the International Conference on Extending Database Technology, Venice, Italy, Mar. 1988.
19. R. Sandhu, V. Bhamidipati, and Q. Munawer. The ARBAC97 model for role-based administration of roles. ACM Trans. on Information and Systems Security, 2(1):105-135, Feb. 1999.
20. R. Sandhu, E. Coyne, H. Feinstein, and C. Youman. Role-based access control models. IEEE Computer, 29:38-47, Feb. 1996.
21. w3c. XML path language (XPath) 2.0, W3C working draft 15. Technical report, http://www.w3.org/TR/xpath20, Nov. 2002.