An integrated access control for securely querying and updating XML data
Duong, Maggie and Zhang, Yanchun (2008) An integrated access control for securely querying and updating XML data. Conferences in Research and Practice in Information Technology, 75. pp. 75-83. ISSN 1445-1336Full text for this resource is not available from the Research Repository.
Many existing access controls use node filtering or querying rewriting techniques. These techniques require rather time-consuming processes such as parsing, labeling, pruning and/or rewriting queries into safe ones each time a user requests a query or takes an action. In this paper, we propose a fine-grained access control model, named SecureX, which supports read and write privileges. With our novel access control concept, various access types are introduced, including those for determining if a user has the right to change XML structure. Furthermore, SecureX can be integrated well with a dynamic labeling scheme to eliminate repetitive labeling and pruning processes when determining a user view. This brings about advantages of speeding up searching and querying processes. When comparing to a traditional node filtering technique, our integrated access control model takes less processing steps. Experiments have shown effectiveness of our approach.
|Uncontrolled Keywords:||ResPubID16441, access control, XML query, XML update, labeling scheme.|
|Subjects:||FOR Classification > 0804 Data Format
FOR Classification > 0806 Information Systems
Faculty/School/Research Centre/Department > School of Engineering and Science
|Date Deposited:||10 May 2012 04:11|
|Last Modified:||16 Apr 2015 04:48|
|ePrint Statistics:||View download statistics for this item|
Repository staff only