Access control for XML documents and data

Information Security Technical Report

Volumn 9, Issue 3, 2004, Pages 19-34

  Bertino, Elisa ^a   Carminati, Barbara ^b   Ferrari, Elena ^b  

^a PURDUE UNIVERSITY   (United States)

^b UNIVERSITY OF INSUBRIA   (Italy)

Author keywords

Access control; Web; XML

Indexed keywords

ACCESS CONTROL; DATA CONTROLS; DIGITAL SIGNATURE; WEB DATA;

BROADCASTING; DATA ACQUISITION; DATA STRUCTURES; DATABASE SYSTEMS; INFORMATION ANALYSIS; JAVA PROGRAMMING LANGUAGE; PROGRAM DOCUMENTATION; SECURITY OF DATA; SEMANTICS; WORLD WIDE WEB;

XML;

EID: 4544357506     PISSN: 13634127     EISSN: None     Source Type: Journal    
DOI: 10.1016/S1363-4127(04)00029-9     Document Type: Article

References (24)

1. E. Bertino, C. Bettini, E. Ferrari, P. Samarati. An Access Control Model Supporting Periodicity Constraints and Temporal Reasoning. ACM Transactions on Database Systems, TODS, 23(3):231-285, 1998.
2. E. Bertino, B. Carminati, E. Ferrari. A Temporal Key Management Scheme for Broadcasting XML Documents. In Proc. of the 9th ACM Conference on Computer and Communications Security (CCS'02), Washington, November 2002, ACM Press.
3. E. Bertino, B. Carminati, E. Ferrari. Merkle Tree Authentication in UDDI Registries. International Journal of Web Services Research, 1(2):37-57 2004.
4. E. Bertino, S. Castano, E. Ferrari, M. Mesiti. Controlled Access and Dissemination of XML Documents. In Proc. 2nd ACM Workshop on Web Information and Data Management (WIDM'99), pp. 22-27, Kansas City (Missouri), November 1999.
5. E. Bertino, S. Castano, E. Ferrari, M. Mesiti. Access Control Policies for XML Document Sources. World Wide Web Journal, 3(3), 2000.
6. E. Bertino, S. Castano, E. Ferrari. Author-X: a Comprehensive System for Securing XML Documents. IEEE Internet Computing, 5(3):21-31. May/June 2001.
7. E. Bertino, S. Castano, E. Ferrari. On Specifying Security Policies for Web Documents with an XML-based Language. Proc. of SACMAT'2001, ACM Symposium on Access Control Models and Technologies, Fairfax, VA, May 2001.
8. E. Bertino, E. Ferrari. Secure and Selective Dissemination of XML Documents.v ACM Transactions on Information and System Security 5(3):290-331, 2002. 18
9. E. Bertino, E. Ferrari, G. Mella. A Framework for Distributed and Cooperative Updates of XML Documents, In Proc. of the 16th Annual IFIP WC 11.3, Working Conference on Data and Application Security, Cambridge, UK, July 2002, pp 211-227.
10. E. Bertino, E. Ferrari, A.C. Squicciarini. Trust-X: A Peer-to-Peer Framework for Trust Establishment, IEEE Transactions on Knowledge and Data Engineering, TKDE, 16(7):837-842, 2004.
11. E. Damiani, S. De Capitani di Vimercati, S. Paraboschi, P. Samarati. Securing XML Documents, In Proc. of the International Conference on Extending Database Technology (EDBT2000), Konstanz, Germany.
12. E. Damiani, S. De Capitani di Vimercati, S. Paraboschi, P. Samarati. A finegrained access control system for XML documents, ACM Transactions on Information and System Security, TISSEC, 5(2):169-202 (2002)
13. D. Ferraiolo, R.Sandhu, S. Cavrila, D.R. Kuhn, R. Chandramouli. Proposed NIST standard for role-based access control. Information and System Security, 4(3):224-274,2001
14. A. Cabillon, E. Bruno. Regulating Access to XML Documents, In Proc. of the Fifteenth Annual IFIP WG 11.3 Working Conference on Database Security. Canada July 15-18, 2001
15. C. Ceuer Pollmann. The XML Security Page, Available at http://www.nue.et-inf.uni-siegen.de/j«geuer-pollmann/xml»security. html.
16. M. Kudo and S. Hada. XML Document Security and e-Business applications, In Proc of the 7th ACM Conference on Computer and Communication Security, Washington D.C., USA, 2000.
17. H. He, R. K. Wong. A Role-Based Access Control Model for XML Repositories, In Proc of the First International Conference on Web Information Systems Engineering (WISE'00)
18. M. Murata, A. Tozawa, M. Kudo and S. Hada. XML access control using static analysis, In Proc. of the 10th ACM conference on Computer and Communication Security, Washington D.C., USA, 2003
19. W. Stallings Network Security Essentials: Applications and Standards. Prentice Hall, 2000.
20. OASIS Consortium, eXtensible Access Control Markup Language (XACML) Committee Specification, Version 1.1. Available at http//www.oasis-open.org/ committees/xacml/
21. Wen-Cuey Tzeng. A Time-Bound Cryptographic Key Assignment Scheme for Access Control in a Hierarchy. IEEE Transactions on Knowledge and Data Engineering, TKDE, 14(1):182-188, 2002.19
22. M. Winslett, N. Ching, V. Jones, I. Slepchin. Using Digital Credentials on the World Wide Web. Journal of Computer Security, 5(3):255-267, Dec. 1997.
23. World Wide Web Consortium. Extensible Markup Language (XML) 1.0, 1998. Available at http://www.w3.org/TR/REC-xml
24. World Wide Web Consortium. XML Path Language (Xpath), 1.0, 1999. Available at: http://www.w3.org/TR/xpath20