Efficient database-driven evaluation of security clearance for federated access control of dynamic XML documents

Erwin Leonardi, Sourav S. Bhowmick, Mizuho Iwaihara

Research output: Chapter in Book/Report/Conference proceedingConference contribution

4 Citations (Scopus)

Abstract

Achieving data security over cooperating web services is becoming a reality, but existing XML access control architectures do not consider this federated service computing. In this paper, we consider a federated access control model, in which Data Provider and Policy Enforcers are separated into different organizations; the Data Provider is responsible for evaluating criticality of requested XML documents based on co-occurrence of security objects, and issuing security clearances. The Policy Enforcers enforce access control rules reflecting their organization-specific policies. A user's query is sent to the Data Provider and she needs to obtain a permission from the Policy Enforcer in her organization to read the results of her query. The Data Provider evaluates the query and also evaluate criticality of the query, where evaluation of sensitiveness is carried out by using clearance rules. In this setting, we present a novel approach, called the DIFF approach, to evaluate security clearance by the Data Provider. Our technique is build on top of relational framework and utilizes pre-evaluated clearances by taking the differences (or deltas) between query results.

Original languageEnglish
Title of host publicationDatabase Systems for Advanced Applications - 15th International Conference, DASFAA 2010, Proceedings
Pages299-306
Number of pages8
EditionPART 1
DOIs
Publication statusPublished - 2010
Event15th International Conference on Database Systems for Advanced Applications, DASFAA 2010 - Tsukuba, Japan
Duration: 2010 Apr 12010 Apr 4

Publication series

NameLecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)
NumberPART 1
Volume5981 LNCS
ISSN (Print)0302-9743
ISSN (Electronic)1611-3349

Conference

Conference15th International Conference on Database Systems for Advanced Applications, DASFAA 2010
CountryJapan
CityTsukuba
Period10/4/110/4/4

ASJC Scopus subject areas

  • Theoretical Computer Science
  • Computer Science(all)

Fingerprint Dive into the research topics of 'Efficient database-driven evaluation of security clearance for federated access control of dynamic XML documents'. Together they form a unique fingerprint.

  • Cite this

    Leonardi, E., Bhowmick, S. S., & Iwaihara, M. (2010). Efficient database-driven evaluation of security clearance for federated access control of dynamic XML documents. In Database Systems for Advanced Applications - 15th International Conference, DASFAA 2010, Proceedings (PART 1 ed., pp. 299-306). (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics); Vol. 5981 LNCS, No. PART 1). https://doi.org/10.1007/978-3-642-12026-8_24