“Privacy protection and fine grained access control to web database”

Web database is combination of database and web technology. Web database is placed on the Internet, there are many security problems. Web and distributed databases play the key role in most of these Web applications and thus it is critical to protect them from unauthorized access and malicious attacks. The secrecy and the integrity are two important demands of security system. When database access control and the network security are addressed separately, the security systems are not optimized sufficiently as a whole. We propose a method of integrating network security with criterion based access control to handle network security and the fine grained Web database access control simultaneously. This access control mechanism is applicable for any existing web databases and is capable to prevent many kinds of attacks, thus significantly decreases the web databases' attack surface.