Attribute Based Access Control for Big Data Applications by Query Modification

Longstaff, Jim; Noble, Joanne

doi:10.1109/bigdataservice.2016.35

Cited by 19 publications

(11 citation statements)

References 20 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Another language-based ABAC approach has been proposed in Longstaff and Noble (2016), with the goal to be usable with traditional data management systems, Mapreduce systems, as well as NoSQL datastores. The work proposes a query rewriting approach that targets user transactions specified with an SQL-like language.…”

Section: Platform Independent Approachesmentioning

confidence: 99%

Access control technologies for Big Data management systems: literature review and future trends

Colombo

Ferrari

2019

Cybersecur

View full text Add to dashboard Cite

Data security and privacy issues are magnified by the volume, the variety, and the velocity of Big Data and by the lack, up to now, of a reference data model and related data manipulation languages. In this paper, we focus on one of the key data security services, that is, access control, by highlighting the differences with traditional data management systems and describing a set of requirements that any access control solution for Big Data platforms may fulfill. We then describe the state of the art and discuss open research issues.

show abstract

Section: Platform Independent Approachesmentioning

confidence: 99%

Access control technologies for Big Data management systems: literature review and future trends

Colombo

Ferrari

2019

Cybersecur

View full text Add to dashboard Cite

show abstract

“…In this section we summarize further aspects of the TCM2 authorization model. More detailed expositions can be found in [9,10].…”

Section: Tcm2 Oveerviewmentioning

confidence: 99%

“…XI. RELATED WORK More details of TCM2 authorisation model and its formal specification can be found in [8,9,18]. These publications give a detailed comparison with ABAC and RBAC research literature.…”

Section: B Problem Transaction Querymentioning

confidence: 99%

See 1 more Smart Citation

ABAC Requirements Engineering for Database Applications

Longstaff

2019

2019 International Symposium on Theoretical Aspects of Software Engineering (TASE)

Self Cite

View full text Add to dashboard Cite

We show how complex privacy requirements can be represented and processed by an extended model of Attribute Based Access Control (ABAC), working with a simple database applications pattern. During application model development, most likely based on UML (e.g. Use Case, Class Diagrams), the analyst and possibly the end user specifies ABAC permissions, and then verifies their effect by running queries on the target data. The ABAC model supports positive and negative permissions, "break glass" overrides of negative permissions, and message/alert generation. The permissions combining algorithms are based on relational database optimisation, and permissions processing is implemented by query modification, producing structurallyoptimised queries in an SQL-like language; the queries can then be processed by many database and big data systems. The method and models have been implemented in a prototype Privacy Preferences Tool in collaboration with a large medical records development, and we discuss experiences with focus group evaluations of this tool.

show abstract

“…The access control mechanisms are used to enable the end-users for controlling the access of their own data. Among different access control mechanisms, Attribute-based Access Control (ABAC) [3] and Role Based Access Control [4] are emerging as a promising paradigm. Generally, ABAC is referred as an access control protocol wherein the access rights are allowed to users through the utilization of policies which combine attributes together.…”

Section: Introductionmentioning

confidence: 99%

An Enhancement Role and Attribute Based Access Control Mechanism in Big Data

Meneka¹,

Meenakshisundaram²

2018

IJECE

View full text Add to dashboard Cite

To be able to leverage big data to achieve enhanced strategic insight and make informed decision, an efficient access control mechanism is needed for ensuring end to end security of such information asset. Attribute Based Access Control (ABAC), Role Based Access Control (RBAC) and Event Based Access Control (EBAC) are widely used access control mechanisms. The ABAC system is much more complex in terms of policy reviews, hence analyzing the policy and reviewing or changing user permission are quite complex task. RBAC system is labor intensive and time consuming to build a model instance and it lacks flexibility to efficiently adapt to changing user’s, objects and security policies. EBAC model considered only the events to allocate access controls. Yet these mechanisms have limitations and offer feature complimentary to each other. So in this paper, Event-Role-Attribute based fine grained Access Control mechanism is proposed, it provide a flexible boundary which effectively adapt to changing user’s, objects and security policies based on the event. The flexible boundary is achieved by using temporal and environment state of an event. It improves the big data security and overcomes the disadvantages of the ABAC and RBAC mechanisms. The experiments are conducted to prove the effectiveness of the proposed Event-Role-Attribute based Access Control mechanism over ABAC and RBAC in terms of computational overhead.

show abstract

Attribute Based Access Control for Big Data Applications by Query Modification

Cited by 19 publications

References 20 publications

Access control technologies for Big Data management systems: literature review and future trends

Access control technologies for Big Data management systems: literature review and future trends

ABAC Requirements Engineering for Database Applications

An Enhancement Role and Attribute Based Access Control Mechanism in Big Data

Contact Info

Product

Resources

About