A Security Pattern for Key-Value NoSQL Database Authorization

Moreno, Julio; Fernández, Eduardo B.; Fernandez-Medina, E.; Serrano, Manuel A.

doi:10.1145/3282308.3282321

Cited by 9 publications

(3 citation statements)

References 7 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…In Accumulo, data is stored in a distributed sorted map . The keys are logically divided into a row key to uniquely identify the row, a column and an automatically generated timestamp used for versioning (Moreno et al , 2018). Each column is further divided into a family (i.e.…”

Section: Key-value Databasesmentioning

confidence: 99%

See 1 more Smart Citation

A systematic literature review of authorization and access control requirements and current state of the art for different database models

Mohamed,

Auer,

Hofer

et al. 2023

IJWIS

View full text Add to dashboard Cite

Purpose Data protection requirements heavily increased due to the rising awareness of data security, legal requirements and technological developments. Today, NoSQL databases are increasingly used in security-critical domains. Current survey works on databases and data security only consider authorization and access control in a very general way and do not regard most of today’s sophisticated requirements. Accordingly, the purpose of this paper is to discuss authorization and access control for relational and NoSQL database models in detail with respect to requirements and current state of the art. Design/methodology/approach This paper follows a systematic literature review approach to study authorization and access control for different database models. Starting with a research on survey works on authorization and access control in databases, the study continues with the identification and definition of advanced authorization and access control requirements, which are generally applicable to any database model. This paper then discusses and compares current database models based on these requirements. Findings As no survey works consider requirements for authorization and access control in different database models so far, the authors define their requirements. Furthermore, the authors discuss the current state of the art for the relational, key-value, column-oriented, document-based and graph database models in comparison to the defined requirements. Originality/value This paper focuses on authorization and access control for various database models, not concrete products. This paper identifies today’s sophisticated – yet general – requirements from the literature and compares them with research results and access control features of current products for the relational and NoSQL database models.

show abstract

Section: Key-value Databasesmentioning

confidence: 99%

“…Moreno et al (2018) proposed a model to describe who can access the values of specific data cells in a key-value database system. The labels may define rules for access matrix, RBAC or multilevel models.…”

Section: Key-value Databasesmentioning

confidence: 99%

A systematic literature review of authorization and access control requirements and current state of the art for different database models

Mohamed,

Auer,

Hofer

et al. 2023

IJWIS

View full text Add to dashboard Cite

show abstract

“…Moreover, we combine risk modeling with goal modeling, taking advantage of the benefits of Goal-Oriented Requirements Engineering. Moreno et al (2018) propose a requirements engineering framework for Big Data, with a special focus on security requirements. Their work aims at providing methodological support to link new data nodes to the existing Big Data cloud.…”

Section: Related Workmentioning

confidence: 99%

GRALD: an Approach for Goal and Risk Analysis in the Development of Information Systems for the Web of Data

Freitas

Guizzardi

Souza

2019

JSERD

View full text Add to dashboard Cite

The publication of Linked Data on the Web regarding several application domains leads to new problems related to Requirements Engineering, which needs to take into account aspects related to new ways of developing systems and delivering information integrated with the Web of Data. Tasks such as (functional and non-functional) requirements elicitation and ontology-based conceptual modeling can be applied to the development of systems that publish Linked Data, in order to obtain a better shared conceptualization (i.e., a domain ontology) of the published data. The use of vocabularies is an intrinsic activity when publishing or consuming Linked Data and their choice can be supported by the elicited requirements and domain ontology. However, it is important to assess the risk when choosing external vocabularies, as their use can lead to problems, such as misinterpretation of meanings due to poor documentation, connection timeouts due to infrastructure problems, etc. Thus, risk identification, modeling and analysis techniques can be employed, in order to identify risks and their impacts on stakeholder goals. In this work, we propose GRALD: Goals and Risks Analysis for Linked Data, an approach for modeling goals and risks for information systems for the Web of Data.

show abstract

Authorization and Access Control for Different Database Models: Requirements and Current State of the Art

Mohamed

Auer

Hofer

et al. 2022

Future Data and Security Engineering. Big Data, Security and Privacy, Smart City and Industry 4.0 Applications

View full text Add to dashboard Cite

A Security Pattern for Key-Value NoSQL Database Authorization

Cited by 9 publications

References 7 publications

A systematic literature review of authorization and access control requirements and current state of the art for different database models

A systematic literature review of authorization and access control requirements and current state of the art for different database models

GRALD: an Approach for Goal and Risk Analysis in the Development of Information Systems for the Web of Data

Authorization and Access Control for Different Database Models: Requirements and Current State of the Art

Contact Info

Product

Resources

About