Succinct access control policies for published XML datasets

ICEIS 2008 - Proceedings of the 10th International Conference on Enterprise Information Systems

Volumn DISI, Issue , 2008, Pages 380-385

  Müldner, Tomasz ^a   Miziołek, Jan Krzysztof ^b   Leighton, Gregory ^c  

^a ACADIA UNIVERSITY   (Canada)

^b UNIVERSITY OF WARSAW   (Poland)

^c UNIVERSITY OF CALGARY   (Canada)

Author keywords

Access control; Parameterized roles; XML

Indexed keywords

ACCESS CONTROL POLICIES; CRYPTOGRAPHIC KEY; DATA SETS; ENCRYPTION OPERATIONS; PARAMETERIZED; PARAMETERIZED ROLES; PROTECTION REQUIREMENTS; RBAC MODEL; READ-ONLY ACCESS; ROLE-BASED ACCESS CONTROL MODEL; SECURE PUBLISHING; TIME COMPLEXITY;

CRYPTOGRAPHY; INFORMATION SYSTEMS; KEYS (FOR LOCKS); MARKUP LANGUAGES; PARAMETERIZATION; SECURITY SYSTEMS; XML;

ACCESS CONTROL;

EID: 55849135819     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (15)

1. Bertino, E., Ferrari, E. Secure and Selective Dissemination of XML Documents. ACM Transactions on Information and System Security (TISSEC), 5(3):290-331, (2002).
2. Bertino, E., Carminati, B., Ferrari, E., Thuraisingham, B., and Gupta A. Selective and Authentic Third-Party Distribution of XML Documents. IEEE Transactions on Knowledge and Data Engineering (TKDE), 16(10):1263-1278, (2004).
3. Damiani, E., De Capitani di Vimercati, S., Paraboschi, S. and Samarati, P. A Fine-grained Access Control System for XML Documents. ACM Transactions on Information and System Security, 5(2): 169-202, (2002).
4. Devanbu, P., Gertz, M., Kwong, A., Martel, C, Nuckolls, G. and S.G. Stubblebine. Flexible Authentication of XML documents. In Proc. of the 8th ACM Conf. on Computer and Communications Security, ACM Press, (2001).
5. Ferraiolo, D.F., Sandhu, R., Gavrila, S., Kuhn, D.S. and Chandramouli, R. Proposed NIST Standard for Role-Based Access Control. ACM Transactions on Information and System Security, Vol. 4, No. 3, (2001), 224-274.
6. Fundulaki, I. and Marx, M. Specifying access control policies for XML documents. Proceedings of the ninth ACM symposium on Access control models and technologies (2004) 61 - 69.
7. Ge, M. and Osborn., S.L. A Design for Parameterized Roles. DBSec (2004), 251-264.
8. Miklau, G. and Suciu, D. Controlling Access to Published Data Using Cryptography, In Proc. of the 29th VLDB Conference, Berlin, Germany, (2003).
9. Müldner, T., Leighton, G. and Miziołek, J.K. Using Multi-Encryption to Provide Secure and Controlled Access to XML Documents. Extreme Markup Languages 2006, (2006), Montreal, Canada.
10. Osborn, S., Sandhu, R., Munawer, Q. Configuring Role-Based Access Control to Enforce Mandatory and Discretionary Access Control Policies. ACM Trans, on Information and System Security, 3:2, (2000), 85-106.
11. Role Based Access Control, http://csrc.nist.gov/rbac/.
12. Wang, J. and Osborn, AS. A role-based approach to access control for XML databases. Proceedings of the ninth ACM symposium on Access control models and technologies Yorktown Heights, US (2004): 70 - 77.
13. W3C XML Encryption http://w3.org/Encryption/2001.
14. XML Path Language. http://www.w3.org/TR/xpath.
15. XML Schema http://www.w3.org/TR/xmlschema-0/