Filtering XPath expressions for XML access control

Computers and Security

Volumn 23, Issue 7, 2004, Pages 591-605

  Jeon, Jae Myeong ^a   Chung, Yon Dohn ^b   Kim, Myoung Ho ^a   Lee, Yoon Joon ^a  

^a Korea Advanced Institute of Science and Technology (KAIST)   (South Korea)

^b Dongguk University   (South Korea)

Author keywords

Access control; Query processing; Security; XML; XPath

Indexed keywords

CRYPTOGRAPHY; INFORMATION ANALYSIS; PROBLEM SOLVING; QUERY LANGUAGES; SECURITY OF DATA; SET THEORY;

ACCESS CONTROL; QUERY PROCESSING; SECURITY; XPATH;

XML;

EID: 8344261653     PISSN: 01674048     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.cose.2004.06.009     Document Type: Article

References (24)

1. Benedikt M, Fan W, Kuper G. Structural properties of XPath fragments. ICDT 2003, Italy; January 2003.
2. Bertino E, Castano S, Ferrari E. Securing XML documents with Author-X. IEEE Internet Computing 2001;5(3):21-31.
3. Blyth A, Cunliffe D, Sutherland I. Security analysis of XML, XML usage and XML parsing. Computer & Security 2003;22(6): 494-505.
4. Cho S, Amer-Yahia S, Lakshmanan L, Srivastava D. Optimizing the secure evaluation of twig queries. In: Proceedings of the 28th VLDB Conference. Hong Kong, China; 2002.
5. Cho S, Amer-Yahia S, Lakshmanan L, Srivastava D. LockX: a system for efficiently querying secure XML. In: Proceedings of the SIGMOD 2003 conference. San Diago, CA; 2003.
6. Damiani E, De Capitani di Vimercanti S, Paraboschi S, Samarati P. Securing XML documents. In: Proceedings of the 2000 international conference on extending database technology (EDBT2000). Germany; March 2000.
7. Damiani E, De Capitani di Vimercanti S, Paraboschi S, Samarati P. Securing SOAP e-services. International Journal of Information Security 2002;1:100-15.
8. Document Object Model, 〈http://www.w3.org/DOM/〉.
9. Jajodia S, Samarati P, Sapino ML, Subrahmanian VS. Flexible support for multiple access control policies. ACM Transactions On Database Systems June 2001;26(2):214-60.
10. Kudo M, Hada S. XML document security based on provisional authorization. CCS 2000, Athens, Greece.
11. Miklau G, Suciu D. Containment and equivalence for an XPath fragment. ACM PODS. Wisconsin; June 2002.
12. Murata M, Tozawa A, Kudo M. XML access control using static analysis. CCS 2003. Washington, DC, USA; 2003.
13. OASIS. Cover pages, 〈http://xml.coverpages.org/xml.html〉 October 2003.
14. OASIS. eXtensible access control markup language (XACML) version 1.0, OASIS standard, 〈http://www.oasis-open.org/committees/tc_home.php? wg_abbrev=xacml〉; February 2003.
15. OASIS. Security assertion markup language (SAML) version 1.1, OASIS standard, 〈http://www.oasis-open.org/committees/tc_home.php?wg_abbrev= security〉.
16. W3C. Canonical XML version 1.0, W3C recommendation, 〈http://www.w3. org/TR/xml-c14n〉; March 2001.
17. W3C. Extensible markup language (XML) 1.0. 2nd ed. 〈http://www.w3. org/TR/REC-xml〉; October 2000.
18. W3C. SOAP security extensions: digital signature, W3C note, 〈http://www.w3.org/TR/SOAP-dsig/〉; February 2001.
19. W3C. XML key management specification (XKMS), W3C note, 〈http://www.w3.org/TR/xkms/〉; March 2001.
20. W3C. XML path language (XPath) version 2.0, W3C working draft, 〈http://www.w3.org/TR/2003/WD-XPath20-20030502/〉; 2003.
21. W3C. XML-signature syntax and processing, W3C recommendation, 〈http://www.w3.org/TR/xmldsig-core/〉; February 2002.
22. W3C. XQuery: a query language for XML. W3C working draft, 〈http://www.w3.org/TR/2003/WD-xquery-20030502/〉; May 2003.
23. W3C. XSL transformations (XSLT) version 1.0, W3C recommendation, 〈http://www.w3.org/TR/xslt〉; November 1999.
24. Yu T, Srivastava D, Lakshmann L, Jagadish H. Compressed accessibility map: efficient access control for XML. In: Proceedings of the 28th VLDB Conference, Hong Kong, China; 2002.