Sciweavers

Share
DASFAA
2010
IEEE

Efficient Database-Driven Evaluation of Security Clearance for Federated Access Control of Dynamic XML Documents

10 years 7 min ago
Efficient Database-Driven Evaluation of Security Clearance for Federated Access Control of Dynamic XML Documents
Achieving data security over cooperating web services is becoming a reality, but existing XML access control architectures do not consider this federated service computing. In this paper, we consider a federated access control model, in which Data Provider and Policy Enforcers are separated into different organizations; the Data Provider is responsible for evaluating criticality of requested XML documents based on co-occurrence of security objects, and issuing security clearances. The Policy Enforcers enforce access control rules reflecting their organization-specific policies. A user's query is sent to the Data Provider and she needs to obtain a permission from the Policy Enforcer in her organization to read the results of her query. The Data Provider evaluates the query and also evaluate criticality of the query, where evaluation of sensitiveness is carried out by using clearance rules. In this setting, we present a novel approach, called the DIFF approach, to evaluate security ...
Erwin Leonardi, Sourav S. Bhowmick, Mizuho Iwaihar
Added 06 Dec 2010
Updated 06 Dec 2010
Type Conference
Year 2010
Where DASFAA
Authors Erwin Leonardi, Sourav S. Bhowmick, Mizuho Iwaihara
Comments (0)
books