Authorization enforcement in distributed query evaluation

Journal of Computer Security

Volumn 19, Issue 4, 2011, Pages 751-794

  De Capitani Di Vimercati, Sabrina ^a   Foresti, Sara ^a   Jajodia, Sushil ^b   Paraboschi, Stefano ^c   Samarati, Pierangela ^a  

^a UNIVERSITY OF MILAN   (Italy)

^b GEORGE MASON UNIVERSITY   (United States)

^c UNIVERSITY OF BERGAMO   (Italy)

Author keywords

authorized views; Distributed query evaluation; safe query planning

Indexed keywords

AUTHORIZED VIEWS; DATA COMPUTATION; DISTRIBUTED COMPUTATIONS; DISTRIBUTED QUERY; EXECUTION STRATEGIES; INFORMATION FLOWS; SAFE QUERY PLANNING;

ALGORITHMS; DATA HANDLING;

DISTRIBUTED DATABASE SYSTEMS;

EID: 79960761612     PISSN: 0926227X     EISSN: None     Source Type: Journal    
DOI: 10.3233/JCS-2010-0413     Document Type: Article

References (27)

1. R. Agrawal, D. Asonov, M. Kantarcioglu and Y. Li, Sovereign joins, in: Proc. of the 22nd International Conference on Data Engineering (ICDE 2006), Atlanta, GA, USA, April 2006.
2. A.V. Aho, C. Beeri and J.D. Ullman, The theory of joins in relational databases, ACM Transaction on Database Systems 4(3) (1979), 297-314.
3. P.A. Bernstein, N. Goodman, E.Wong, C.L. Reeve and J.B. Rothnie Jr., Query processing in a system for distributed databases (SDD-1), ACM Transaction on Database Systems 6(4) (1981), 602-625. (Pubitemid 12503981)
4. E. Bertino and L.M. Haas, Views and security in distributed database management systems, in: Proc. of the 1st International Conference on Extending Database Technology (EDBT 1988), Venice, Italy, March 1988.
5. A. Calì and D. Martinenghi, Querying data under access limitations, in: Proc. of the 24th International Conference on Data Engineering (ICDE 2008), Cancun, Mexico, April 2008.
6. S. Ceri and G. Pelagatti, Distributed Databases: Principles and Systems, McGraw-Hill, New York, 1984.
7. D.M. Chiu and Y.C. Ho, A methodology for interpreting tree queries into optimal semi-join expressions, in: Proc. of the 1980 ACM SIGMOD International Conference on Management of Data (SIGMOD 1980), Santa Monica, CA, USA, May 1980.
8. S. Cimato, M. Gamassi, V. Piuri, R. Sassi and F. Scotti, Privacy-aware biometrics: design and implementation of a multimodal verification system, in: Proc. of the Computer Security Applications Conference (ACSAC 2008), Anaheim, CA, USA, December 8-12, 2008.
9. D.W. Cornell and P.S. Yu, On optimal site assignment for relations in the distributed database environment, IEEE Transactions on Software Engineering 15(8) (1989), 1004-1009.
10. S. Dawson, S. Qian and P. Samarati, Providing security and interoperation of heterogeneous systems, Distributed and Parallel Databases 8(1) (2000), 119-145. (Pubitemid 30572228)
11. S. De Capitani di Vimercati, S. Foresti, S. Jajodia, S. Paraboschi and P. Samarati, Controlled information sharing in collaborative distributed query processing, in: Proc. of the 28th International Conference on Distributed Computing Systems (ICDCS 2008), Beijing, China, June 2008.
12. S. De Capitani di Vimercati, S. Foresti, S. Jajodia, S. Paraboschi and P. Samarati, Assessing query privileges via safe and efficient permission composition, in: Proc. of the 15th ACM Conference on Computer and Communications Security (CCS 2008), Alexandria, VA, USA, October 2008.
13. S. De Capitani di Vimercati and P. Samarati, An authorization model for federated systems, in: Proc. of 4th European Symposium on Research in Computer Security (ESORICS 1996), Rome, Italy, September 1996.
14. A. Deutsch, B. Ludäscher and A. Nash, Rewriting queries using views with access patterns under integrity constraints, in: Proc. of the 10th International Conference on Database Theory (ICDT 2005), Edinburgh, Scotland, January 2005.
15. D. Florescu, A.Y. Levy, I. Manolescu and D. Suciu, Query optimization in the presence of limited access patterns, in: Proc. of the 1999 ACM SIGMOD International Conference on Management of Data (SIGMOD 1999), Philadelphia, PA, USA, June 1999.
16. M. Gamassi, V. Piuri, D. Sana and F. Scotti, Robust fingerprint detection for access control, in: Proc. of the 2nd RoboCare Workshop, Rome, Italy, May 5, 2005.
17. G. Gottlob and A. Nash, Data exchange: Computing cores in polynomial time, in: Proc. of the 25th ACM SIGMOD-SIGACT-SIGART Symposium on Principles of Database Systems (PODS 2006), Chicago, IL, USA, June 2006.
18. A. Helal, Y.-S. Kim, M.H. Nodine, A.K. Elmagarmid and A.A. Heddaya, Transaction optimization techniques, in: Advanced Transaction Models and Architectures, S. Jajodia and L. Kerchberg, eds, Kluwer, Boston, MA, 1997.
19. D. Kossmann, The state of the art in distributed query processing, ACM Computing Surveys 32(4) (2000), 422-469.
20. C. Li, Computing complete answers to queries in the presence of limited access patterns, VLDB Journal 12(3) (2003), 211-227. (Pubitemid 37326596)
21. G.M. Lohman, D. Daniels, L.M. Haas, R. Kistler and P.G. Selinger, Optimization of nested queries in a distributed relational database, in: Proc. of the 10th International Conference on Very Large Data Bases (VLDB 1984), Singapore, August 1984.
22. P. Mitra, C. Pan, P. Liu and V. Atluri, Privacy-preserving semantic interoperation and access control of heterogeneous databases, in: Proc. of the ACM Symposium on Information, Computer and Communications Security (ASIACCS 2006), Taipei, Taiwan, March 2006.
23. A. Nash and A. Deutsch, Privacy in GLAV information integration, in: Proc. of the 10th International Conference on Database Theory (ICDT 2005), Barcelona, Spain, January 2007.
24. P. Samarati and S. De Capitani di Vimercati, Access control: Policies, models, and mechanisms, in: Foundations of Security Analysis and Design, R. Focardi and R. Gorrieri, eds, LNCS, Vol. 2171, Springer, Berlin, 2001.
25. P.G. Selinger, M.M. Astrahan, D.D. Chamberlin, R.A. Lorie and T.G. Price, Access path selection in a relational database management system, in: Proc. of the 1979 ACM SIGMOD International Conference on Management of Data (SIGMOD 1979), Boston, MA, USA, May-June 1979.
26. J. Warner, V. Atluri and R. Mukkamala, A credential-based approach for facilitating automatic resource sharing among ad-hoc dynamic coalitions, in: Proc. of the 19th Annual IFIP WG 11.3 Working Conference on Data and Applications Security (DBSec 2005), Storrs, CT, USA, August 2005.
27. C.T. Yu and C.C. Chang, Distributed query processing, ACM Computing Surveys 16(4) (1984), 399-433.