Pragmatic XML access control using off-the-shelf RDBMS

Bo Luo; Dongwon Lee; Peng Liu

doi:10.1007/978-3-540-74835-9_5

Pragmatic XML access control using off-the-shelf RDBMS

Bo Luo, Dongwon Lee, Peng Liu

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution

4 Scopus citations

Abstract

As the XML model gets more popular, new needs arise to specify access control within XML model. Various XML access control models and enforcement methods have been proposed recently. However, by and large, these approaches either assume the support of security features from XML databases or use proprietary tools outside of databases. Since there are currently few commercial XML databases with such capabilities, the proposed approaches are not yet practical. Therefore, we explore the problem of "Is is possible to fully support XML access control in RDBMS?" We formalize XML and relational access control models using deep set operators. Then we show that the problem of XML AC atop RDBMS is amount to the problem of converting XML deep set operators into equivalent relational deep set operators. We show the conversion algebra and identify the properties to ensure the correct conversion. Finally, we present three practical implementations of XML access controls using off-the-shelf RDBMS and their performance results.

Original language	English (US)
Title of host publication	Computer Security - ESORICS 2007 - 12th European Symposium on Research in Computer Security, Proceedings
Publisher	Springer Verlag
Pages	55-71
Number of pages	17
ISBN (Print)	9783540748342
DOIs	https://doi.org/10.1007/978-3-540-74835-9_5
State	Published - 2007
Event	12th European Symposium on Research in Computer Security, ESORICS 2007 - Dresden, Germany Duration: Sep 24 2007 → Sep 26 2007

Publication series

Name	Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)
Volume	4734 LNCS
ISSN (Print)	0302-9743
ISSN (Electronic)	1611-3349

Other

Other	12th European Symposium on Research in Computer Security, ESORICS 2007
Country/Territory	Germany
City	Dresden
Period	9/24/07 → 9/26/07

All Science Journal Classification (ASJC) codes

Theoretical Computer Science
General Computer Science

Access to Document

10.1007/978-3-540-74835-9_5

Cite this

Luo, B., Lee, D., & Liu, P. (2007). Pragmatic XML access control using off-the-shelf RDBMS. In Computer Security - ESORICS 2007 - 12th European Symposium on Research in Computer Security, Proceedings (pp. 55-71). (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics); Vol. 4734 LNCS). Springer Verlag. https://doi.org/10.1007/978-3-540-74835-9_5

Luo, Bo ; Lee, Dongwon ; Liu, Peng. / Pragmatic XML access control using off-the-shelf RDBMS. Computer Security - ESORICS 2007 - 12th European Symposium on Research in Computer Security, Proceedings. Springer Verlag, 2007. pp. 55-71 (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)).

@inproceedings{b5e9a95014c54b9dbfc06b5359440ee3,

title = "Pragmatic XML access control using off-the-shelf RDBMS",

abstract = "As the XML model gets more popular, new needs arise to specify access control within XML model. Various XML access control models and enforcement methods have been proposed recently. However, by and large, these approaches either assume the support of security features from XML databases or use proprietary tools outside of databases. Since there are currently few commercial XML databases with such capabilities, the proposed approaches are not yet practical. Therefore, we explore the problem of {"}Is is possible to fully support XML access control in RDBMS?{"} We formalize XML and relational access control models using deep set operators. Then we show that the problem of XML AC atop RDBMS is amount to the problem of converting XML deep set operators into equivalent relational deep set operators. We show the conversion algebra and identify the properties to ensure the correct conversion. Finally, we present three practical implementations of XML access controls using off-the-shelf RDBMS and their performance results.",

author = "Bo Luo and Dongwon Lee and Peng Liu",

year = "2007",

doi = "10.1007/978-3-540-74835-9_5",

language = "English (US)",

isbn = "9783540748342",

series = "Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)",

publisher = "Springer Verlag",

pages = "55--71",

booktitle = "Computer Security - ESORICS 2007 - 12th European Symposium on Research in Computer Security, Proceedings",

address = "Germany",

note = "12th European Symposium on Research in Computer Security, ESORICS 2007 ; Conference date: 24-09-2007 Through 26-09-2007",

}

Luo, B, Lee, D & Liu, P 2007, Pragmatic XML access control using off-the-shelf RDBMS. in Computer Security - ESORICS 2007 - 12th European Symposium on Research in Computer Security, Proceedings. Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics), vol. 4734 LNCS, Springer Verlag, pp. 55-71, 12th European Symposium on Research in Computer Security, ESORICS 2007, Dresden, Germany, 9/24/07. https://doi.org/10.1007/978-3-540-74835-9_5

Pragmatic XML access control using off-the-shelf RDBMS. / Luo, Bo; Lee, Dongwon ; Liu, Peng.
Computer Security - ESORICS 2007 - 12th European Symposium on Research in Computer Security, Proceedings. Springer Verlag, 2007. p. 55-71 (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics); Vol. 4734 LNCS).

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution

TY - GEN

T1 - Pragmatic XML access control using off-the-shelf RDBMS

AU - Luo, Bo

AU - Lee, Dongwon

AU - Liu, Peng

PY - 2007

Y1 - 2007

N2 - As the XML model gets more popular, new needs arise to specify access control within XML model. Various XML access control models and enforcement methods have been proposed recently. However, by and large, these approaches either assume the support of security features from XML databases or use proprietary tools outside of databases. Since there are currently few commercial XML databases with such capabilities, the proposed approaches are not yet practical. Therefore, we explore the problem of "Is is possible to fully support XML access control in RDBMS?" We formalize XML and relational access control models using deep set operators. Then we show that the problem of XML AC atop RDBMS is amount to the problem of converting XML deep set operators into equivalent relational deep set operators. We show the conversion algebra and identify the properties to ensure the correct conversion. Finally, we present three practical implementations of XML access controls using off-the-shelf RDBMS and their performance results.

AB - As the XML model gets more popular, new needs arise to specify access control within XML model. Various XML access control models and enforcement methods have been proposed recently. However, by and large, these approaches either assume the support of security features from XML databases or use proprietary tools outside of databases. Since there are currently few commercial XML databases with such capabilities, the proposed approaches are not yet practical. Therefore, we explore the problem of "Is is possible to fully support XML access control in RDBMS?" We formalize XML and relational access control models using deep set operators. Then we show that the problem of XML AC atop RDBMS is amount to the problem of converting XML deep set operators into equivalent relational deep set operators. We show the conversion algebra and identify the properties to ensure the correct conversion. Finally, we present three practical implementations of XML access controls using off-the-shelf RDBMS and their performance results.

UR - http://www.scopus.com/inward/record.url?scp=38049064508&partnerID=8YFLogxK

UR - http://www.scopus.com/inward/citedby.url?scp=38049064508&partnerID=8YFLogxK

U2 - 10.1007/978-3-540-74835-9_5

DO - 10.1007/978-3-540-74835-9_5

M3 - Conference contribution

AN - SCOPUS:38049064508

SN - 9783540748342

T3 - Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

SP - 55

EP - 71

BT - Computer Security - ESORICS 2007 - 12th European Symposium on Research in Computer Security, Proceedings

PB - Springer Verlag

T2 - 12th European Symposium on Research in Computer Security, ESORICS 2007

Y2 - 24 September 2007 through 26 September 2007

ER -

Luo B, Lee D , Liu P. Pragmatic XML access control using off-the-shelf RDBMS. In Computer Security - ESORICS 2007 - 12th European Symposium on Research in Computer Security, Proceedings. Springer Verlag. 2007. p. 55-71. (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)). doi: 10.1007/978-3-540-74835-9_5

Pragmatic XML access control using off-the-shelf RDBMS

Abstract

Publication series

Other

All Science Journal Classification (ASJC) codes

Access to Document

Other files and links

Fingerprint

Cite this