MyABDAC: Compiling XACML policies for attribute-based database access control

CODASPY'11 - Proceedings of the 1st ACM Conference on Data and Application Security and Privacy

Volumn , Issue , 2011, Pages 97-108

  Jahid, Sonia ^a   Gunter, Carl A ^a   Hoque, Imranul ^a   Okhravi, Hamed ^a  

^a UNIVERSITY OF ILLINOIS AT URBANA CHAMPAIGN   (United States)

Author keywords

Access control list; Attribute; Database; MySQL; XACML

Indexed keywords

ACCESS CONTROL LISTS; ATTRIBUTE; DATABASE; MYSQL; XACML;

DATA PRIVACY; DATABASE SYSTEMS; SECURITY SYSTEMS;

ACCESS CONTROL;

EID: 79952813395     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1943513.1943528     Document Type: Conference Paper

References (32)

1. R. Agrawal, J. Kiernan, R. Srikant, and Y. Xu. Hippocratic databases. In VLDB, 2002.
2. M. A. Al-Kahtani and R. Sandhu. A model for attribute-based user-role assignment. In ACSAC, 2002.
3. J. Bethencourt, A. Sahai, and B. Waters. Ciphertext-policy attribute-based encryption. In IEEE S & P, 2007.
4. R. Bobba, O. Fatemieh, F. Khan, C. A. Gunter, and H. Khurana. Using attribute-based access control to enable attribute-based messaging. In ACSAC, 2006.
5. J.-W. Byun and N. Li. Purpose based access control for privacy protection in relational database systems. VLDB J., 2008.
6. W. R. Cook and M. R. Gannholm. Rule based database security system and method. http://www.freepatentsonline.com/6820082.html, November 2004.
7. O. Corportation. Oracle virtual private database. Technical report, Oracle Corporation, 2005.
8. C. Costa. A framework proposal for fine grained access control. Informatica, L1(2):99-108, 2006.
9. D. Ferraiolo and R. Kuhn. Role-based access control. In 15th NIST-NCSC National Computer Security Conference, 1992.
10. D. F. Ferraiolo, D. R. Kuhn, and R. Chandramouli. Role-Based Access Control. Artech House, 2003.
11. S. Franzoni, P. Mazzoleni, S. Valtolina, and E. Bertino. Towards a fine-grained access control model and mechanisms for semantic databases. In ICWS, 2007.
12. S. Godik and T. Moses. eXtensible Access Control Markup Language (XACML). Technical Report v1.1, OASIS, August 2003.
13. Google code enterprise java XACML implementation. http://code.google.com/ p/enterprise-java-xacml.
14. V. Goyal, O. Pandey, A. Sahai, and B. Water. Attribute-based encryption for fine-grained access control of encrypted data. In ACM CCS, 2006.
15. Apache struts. http://struts.apache.org.
16. MySQL. http://www.mysql.com.
17. G. Karjoth, A. Schade, and E. V. Herreweghen. Implementing ACL-based policies in XACML. In ACSAC, 2008.
18. A. X. Liu, F. Chen, J. Hwang, and T. Xie. XEngine: A fast and scalable xacml policy evaluation engine. In ACM SIGMETRICS, 2008.
19. S. Marouf, M. Shehab, A. Squicciarini, and S. Sundareswaran. Statistics & clustering based framework for efficient XACML policy evaluation. POLICY, 2009.
20. MySQL. MySQL Reference Manual, 2008.
21. A. Nanda. Fine Grained Access Control. Proligence, 2003.
22. L. E. Olson, C. A. Gunter, W. R. Cook, and M. Winslett. Implementing reective access control in SQL. In DBSec, 2009.
23. S. Rizvi, A. Mendelzon, S. Sudarshan, and P. Roy. Extending query rewriting techniques for fine-grained access control. In ACM SIGMOD, 2004.
24. A. Roichman and E. Gudes. Fine-grained access control to web databases. In SACMAT, 2007.
25. A. Sahai and B. Waters. Fuzzy identity based encryption. In Eurocrypt, 2005.
26. J. H. Saltzer and M. D. Schroeder. The protection of information in computer systems. Proceedings of the IEEE, 63(9):1278-1308, 1975.
27. R. S. Sandhu, E. J. Coyne, H. L. Feinstein, and C. E. Youman. Role-based access control models. IEEE Computer, 29(2), 1996.
28. Security-enhanced linux. http://www.nsa.gov/research/selinux/index.shtml.
29. G. Stermsek, M. Strembeck, and G. Neumann. Using subject- and object-specific attributes for access control in web-based knowledge management systems. In SKM, 2004.
30. S. D. Stoller. Trust management and trust negotiation in an extension of SQL. In TGC, 2009.
31. Sun Microsystems, Inc. Sun's XACML Implementation.
32. T. Yu, M. Winslett, and K. E. Seamons. Supporting structured credentials and sensitive policies through interoperable strategies for automated trust negotiation. ACM TISSEC, 2003.