RDF metadata for XML access control

Gowadia, Vaibhav; Farkas, Csilla

doi:10.1145/968559.968567

Cited by 18 publications

(13 citation statements)

References 15 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Several papers consider the case of evolving access control policies expressed in XQuery [25] and by means of RDF [3,28]. Such policies can be used for a derivation of new access control rules including content-based constraints of requested and other documents, environmental information like time and place of request initiator,and information about possessed privileges.…”

Section: Runtime Policy Evaluationmentioning

confidence: 99%

Generalized XML security views

Kuper

Massacci

Rassadko

2009

Int. J. Inf. Secur.

View full text Add to dashboard Cite

We investigate a generalization of the notion of XML security view introduced by Stoica and Farkas (ProThe model consists of access control policies specified over DTDs with XPath expressions for data-dependent access control. We provide the notion of security views characterizing information accessible to authorized users. This is a transformed DTD schema that can be used by users for query formulation. We develop an algorithm to materialize an authorized version of the document from the view and an algorithm to construct the view from an access control specification. We show that our view construction combined with materialization produces the same result as the direct application of the DTD access specification on the document. We also propose a number of generalizations of possible security policies and show how they affect view construction algorithm. Finally, we provide an evaluation of our system.

show abstract

Section: Runtime Policy Evaluationmentioning

confidence: 99%

Generalized XML security views

Kuper

Massacci

Rassadko

2009

Int. J. Inf. Secur.

View full text Add to dashboard Cite

show abstract

“…<!DOCTYPE patientrecords[ <!ELEMENT patientrecords(patient*)> <!ELEMENT patient(ssn,name,phone,age,race,diagnosis*)> <!ELEMENT ssn(#PCDATA)> <!ELEMENT name(#PCDATA)> <!ELEMENT phone(#PCDATA)> <!ELEMENT birthdate(#PCDATA)> <!ELEMENT race(#PCDATA)> <!ELEMENT diagnosis(date,physician,comment*,presecription*)> <!ELEMENT date(#PCDATA)> <!ELEMENT physician(#PCDATA)> <!ELEMENT comment(#PCDATA)> <!ELEMENT prescription(#PCDATA)> <!ELEMENT allergies(allergen* The RXACL architecture, introduced in Gowadia and Farkas (2003), provides flexible access control granularity by allowing security classification of XML nodes and subtrees (simple security objects), and associations among nodes (association security objects). In Gowadia and Farkas (2003) we proposed a technique to enforce association-based access control at data-level (i.e., check for security violation after query processing) and it is outside the scope of this paper.…”

Section: Introductionmentioning

confidence: 99%

“…In Gowadia and Farkas (2003) we proposed a technique to enforce association-based access control at data-level (i.e., check for security violation after query processing) and it is outside the scope of this paper. In this paper we extend RXACL architecture by presenting techniques for performing a security check before the query is processed.…”

Section: Introductionmentioning

confidence: 99%

“…The RXACL uses an existing XML query engine, the development of such an engine is outside the scope of this paper. The data-level access control component analyzes the query-answer based on the security policy and data previously released to the user (Gowadia and Farkas, 2003). The history component keeps track of answered query-patterns and data released to each user.…”

Section: Introductionmentioning

confidence: 99%

See 1 more Smart Citation

Tree Automata for Schema-level Filtering of XML Associations

Gowadia

Farkas

2005

Proceedings of the 3rd International Workshop on Security in Information Systems

View full text Add to dashboard Cite

In this paper we present query filtering techniques based on bottomup tree automata for XML access control. In our authorization model (RXACL), RDF statements are used to represent security objects and to express the security policy. We present the concepts of a simple security object and an association security object. Our model allows us to express and enforce access control on XML trees and their associations. We propose a query-filtering technique that evaluates XML queries to detect disclosure of association-level security objects. We use tree automata to model-security objects. Intuitively a query Q discloses a security object o if and only if the (tree) automata corresponding to o accepts Q. We show that our schema-level method detects all possible disclosures, i.e., it is complete.

show abstract

“…The query is submitted to XML query engine for further processing. The result of unsafe query's evaluation are further evaluated for possible data-level violations as described in Gowadia and Farkas (2003). Answer to safe queries is returned to user without further security analysis.…”

Section: Introductionmentioning

confidence: 99%