Specifying and enforcing access control policies for XML document sources

World Wide Web

Volumn 3, Issue 3, 2000, Pages 139-151

  Bertino, Elisa ^a   Castano, Silvana ^a   Ferrari, Elena ^a   Mesiti, Marco ^b  

^a UNIVERSITY OF MILAN   (Italy)

^b UNIVERSITY OF GENOA   (Italy)

Author keywords

Access Control; Access Control Mechanism; Access Control Model; Access Control Policy; Access Request

Indexed keywords

ACCESS CONTROL MODELS; HYPERTEXT SYSTEMS; INFORMATION DISSEMINATION;

ACCESS CONTROL MECHANISM; ACCESS CONTROL MODELS; ACCESS CONTROL POLICIES; ACCESS REQUEST; DIFFERENTIATED PROTECTION; GRANULARITY LEVELS; PRIVATE ORGANIZATIONS; PROTECTION REQUIREMENTS; PUBLIC ORGANIZATIONS; XML (EXTENSIBLE MARKUP LANGUAGE);

XML;

EID: 85134887303     PISSN: 1386145X     EISSN: 15731413     Source Type: Journal    
DOI: 10.1023/A:1019289831564     Document Type: Article

References (19)

1. Bertino, E., C. Bettini, E. Ferrari, and P. Samarati (1996), “A Temporal Access Control Mechanism for Database Systems,” IEEE Transactions on Knowledge and Data Engineering 8, 1, 67–80. DOI: 10.1109/69.485637
2. Bertino, E., S. Castano, E. Ferrari, and M. Mesiti (1999a), “Controlled Access and Dissemination of XML Documents, ” In Proceedings of the 2nd ACM Workshop on Web Information and Data Management, Kansas City, MI, pp. 22–27.
3. Bertino, E., G. Guerrini, I. Merlo, and M. Mesiti (1999b), “An Approach to Classify Semi-Structured Objects,” In Proceedings of the 13th European Conference on Object-oriented Programming, R. Guerraoui, Ed., Lecture Notes in Computer Science, Vol. 1628, pp. 416–440.
4. Bertino, E., M. Braun, S. Castano, E. Ferrari, and M. Mesiti (2000), “Author-X: A Java-Based System for XML Data Protection,” In Proceedings of the 14th IFIP WG 11.3 Annual Conference on Database Security, Schoorl, The Netherlands.
5. Castano, S. and V. De Antonellis (1999), “A Discovery-based Approach to Database Ontology Design,” Distributed and Parallel Databases – Special Issue on Ontologies and Databases 7, 1.
6. Damiani, E., S. De Capitani di Vimercati, S. Paraboschi, and P. Samarati (2000), “Securing XML Documents,” In Proceedings of the International Conference on Extending Database Technology (EDBT2000), Konstanz, Germany.
7. Deutsch, A., M. Fernandez, D. Florescu, A. Levy, and D. Suciu (1999), “A Query Language for XML,” In International Conference on World Wide Web, Toronto, Canada, http://www8.org/.
8. Fernandez, E., E. Gudes, and H. Song (1994), “A Model for Evaluation and Administration of Security in Object-oriented Databases,” IEEE Transactions on Knowledge and Data Engineering 6, 275–292. DOI: 10.1109/69.277771
9. ISO (1986), “Generalized Markup Language (SGML),” In ISO 8879.
10. Miller, A. (1995), “aWordNet: A Lexical Database for English,” Communications of the ACM 38, 11, 39–41. DOI: 10.1145/219717.219748
11. Milo T. and S. Zohar (1998), “Using Schema Matching to Simplify Heterogeneous Data Translation,” In Proceedings of the 24th International Conference on Very Large Data Bases, A. Gupta, O. Shmueli, and J. Widom, Eds., pp. 122–133.
12. Nestorov, S., S. Abiteboul, and R. Motwani (1998), “Extracting Schema from Semistructured Data,” In Proceedings of the ACM SIGMOD International Conference on Management of Data, L.M. Haas and A. Tiwary, Eds., pp. 295–306.
13. Object Design Inc. (1998), “An XML Data Server for Building Enterprise Web Applications,” white paper, http://www.odi.com/excelon.
14. Rabitti, F., E. Bertino, W. Kim, and D. Woelk (1991), “A Model of Authorization for Next-generation Database Systems,” ACM Transactions on Database Systems 16, 1, 88–131. DOI: 10.1145/103140.103144
15. Samarati, P., E. Bertino, and S. Jajodia (1996), “An Authorization Model for a Distributed Hypertext System,” IEEE Transactions on Knowledge and Data Engineering 8, 4, 555–562. DOI: 10.1109/69.536249
16. Winslett, M., N. Ching, V. Jones, and I. Slepchin (1997), “Using Digital Credentials on the World Wide Web,” Journal of Computer Security 5.
17. World Wide Web Consortium (1998a), “Extensible Markup Language (XML) 1.0,” http://www.w3.org/TR/REC-xml.
18. World Wide Web Consortium (1998b), “Hypertext Markup Language (HTML) 4.0,” http://www.w3.org/TR/REC-html40/.
19. World Wide Web Consortium (1999), “XML Path Language (Xpath) 1.0,” http://www.w3.org/TR/xpath.