Extended RBAC-based design and implementation for a secure data warehouse

International Journal of Business Intelligence and Data Mining

Volumn 2, Issue 4, 2007, Pages 367-382

  Thuraisingham, Bhavani ^a   Kantarcioglu, Murat ^a   Iyer, Srinivasan ^a  

^a The University of Texas at Dallas   (United States)

Author keywords

Data warehouses; Role based access control; Security and privacy

Indexed keywords

EID: 48649090732     PISSN: 17438187     EISSN: 17438195     Source Type: Journal    
DOI: 10.1504/IJBIDM.2007.016379     Document Type: Article

References (19)

1. Adam, N.R. and Wortmann, J.C. (1989) 'Security-control methods for statistical databases: A comparative study', ACM Computing Surveys Vol. 21, No. 4, pp.515-556.
2. Agrawal, R., Kiernan, J., Srikant, R. and Xu, Y. (2002) 'Hippocratic databases', 28th Int'l Conference on Very Large Databases, Hong Kong, China, pp.143-154.
3. Bestougeff, H., Dubois, J.E. and Thuraisingham, B. (2002) Heterogeneous Information Exchange and Organizational Hubs, Kluwer, MA.
4. Clifton, C. and Marks, D. (1996) 'Security and privacy implications of data mining', ACM SIGMOD Workshop on Data Mining and Knowledge Discovery, Montreal, Canada, pp.15-19.
5. Friedman, A., Wolff, R. and Schuster, A. (2007) 'Providing k anonymity in data mining', VLDB Journal, To appear.
6. Inmon, W.H. (1993) Building the Data Warehouse, John Wiley and Sons, NY.
7. Kantarcioglu, M., Celikel, E. and Thuraisingham, B. (2006) Risk-based Role-based Access Control, Technical Report, The University of Texas at Dallas.
8. Kantarcioglu, M., Jin, J. and Clifton, C. (2004) 'When do data mining results violate privacy?', Proceedings of the 2004 ACM SIGKDD International Conference on Knowledge Discovery and Data Mining, Seattle, WA, pp.599-604.
9. ABC usage control model', ACM Transactions on Information and System Security, Vol. 7, No. 1.
10. Sandhu, R., Coyne, E., Feinstein, H. and Youman, C. (1996) 'Role-based access control models', IEEE Computer, Vol. 29, No. 2, pp.38-47.
11. Schneier, B. and Kelsey, J. (1999) 'Security audit logs to support computer forensics', ACM Transactions on Information and System Security, Vol. 2, pp.159-176.
12. Sweeney, L. (2002) 'k-anonymity: A model for protecting privacy', International Journal on Uncertainty, Fuzziness and Knowledge-based Systems, Vol. 10, No. 5, pp.557-570.
13. Thuraisingham, B. (2002) 'Data mining, national security, privacy and civil liberties', SIGKDD Explorations, Vol. 4, No. 2, pp.1-5.
14. Thuraisingham, B. (1991) 'Multilevel security issues in distributed database management systems II', Computers and Security, Vol. 10, No. 8, pp.727-747.
15. Thuraisingham, B. (1993) 'Towards developing a standard multilevel relational data model for representing a multilevel universe', Computer Standards and Interfaces Journal (North Holland), Vol. 15, No. 1, pp.21-34.
16. Thuraisingham, B. and Ford, W. (1993) 'Parallel processing and trusted database management systems', Proceedings of the 1993 ACM Conference on Computer Science (Indianapolis, Indiana, United States, February 16-18, 1993), CSC '93, ACM, New York, NY, pp.162-167.
17. Thuraisingham, B. (1994) 'Security issues for federated database systems', Computers and Security, Vol. 13, p.6.
18. Thuraisingham, B. (1997) 'Data warehousing, data mining and security', Presented at the IFIP Database Security Conference, Paper Published in formal proceedings by Chapman and Hall, Como, Italy, 1996.
19. Thuraisingham, B. (2005) Database and Applications Security, CRC Press/Auerbach.