High-speed Access Control for Xml
نویسنده
چکیده
One of the important tasks of managing eXtensible Markup Language (XML) documents is to uniformly specify and securely maintain both target documents and authorization policies. However‚ since existing techniques decouple access authorization from query processing‚ the query processing time with access control is not satisfactorily fast. The access control requires the overhead in addition to the time required for query processing‚ and the powerful expression of authorization policies makes it impossible to accelerate the determination of access authorization. In this paper‚ we propose a bitmap-based access authorization technique for both fast and secure services of XML documents. The authorization policies are encoded into a bitmap index and further to be coupled an index of XML documents. User access requests are encoded into bitmap-masks. By applying bit-wise operations of a bitmap-mask to the authorization bitmap index‚ authorization can be determined significantly fast. The contribution of this paper includes 1) the dual goals achieved for fast and secure accesses to XML document collections‚ and 2) early propagation of subjects and objects in bitmap indexes.
منابع مشابه
On Fine-Grained Access Control for XML
Fine-grained access control for XML is about controlling access to XML documents at the granularity of individual elements or attributes. This thesis addresses two problems related to XML access controls. The first is efficient, secure evaluation of XPath expressions. We present a technique that secures path expressions by means of query modification, and we show that the query modification alg...
متن کاملOntology-Based Secure XML Content Distribution
This paper presents an ontology-driven secure XML content distribution scheme. This scheme first relies on a semantic access control model for XML documents that achieves three objectives: (1) representing flexible and evolvable policies, (2) providing a high-level mapping and interoperable interface to documents, and (3) automating the granting of fine-grained access rights by inferring on con...
متن کاملA petri net based XML firewall security model for web services invocation
An XML firewall differs from a conventional firewall because its major task is to control access to web services rather than to filter untrusted addresses. An XML firewall can effectively protect web services from being attacked by inspecting a complete XML message including its head and data segments, and rejecting unauthorized web services invocation. In this paper, we propose a formal XML fi...
متن کاملSecure XML querying based on authorization graphs
XML is rapidly emerging as a standard for data representation and exchange over the World Wide Web and an increasing amount of sensitive business data is processed in XML format. Therefore, it is critical to have control mechanisms to restrict a user to access only the parts of XML documents that she is authorized to access. In this paper, we propose the first DTD-based access control model tha...
متن کاملXML Access Control
Definition XML access control refers to the practice of limiting access to (parts of) XML data to only authorized users. Similar to access control over other types of data and resources, XML access control is centered around two key problems: (i) the development of formal models for the specification of access control policies over XML data; and (ii) techniques for efficient enforcement of acce...
متن کامل