DMCA
Enhancing Database Access Control with (2009)
| Venue: | XACML Policy, poster at 16 th ACM Conference on Computer and Communications Security, http://www.cs.illinois.edu/homes/sjahid2/pub/myabdac-ccs09-abstractJahidHOG.pdf |
| Citations: | 1 - 0 self |
BibTeX
@INPROCEEDINGS{Jahid09enhancingdatabase,
author = {Sonia Jahid and Imranul Hoque and Hamed Okhravi and Carl A. Gunter},
title = {Enhancing Database Access Control with},
booktitle = {XACML Policy, poster at 16 th ACM Conference on Computer and Communications Security, http://www.cs.illinois.edu/homes/sjahid2/pub/myabdac-ccs09-abstractJahidHOG.pdf},
year = {2009}
}
Share
 |
 |
 |
 |
||
OpenURL
Abstract
XACML is apparently the most convenient way to express attribute-based access control policies. Though XACML has been used in several access control areas, processing XACML policies for attribute-based database access control still has not been studied in depth. In this work we compile XACML policies, and utilize the underlying database access mechanisms such as ACLs to protect sensitive data. We use the attribute information residing in the database itself to define high level XACML policies and transform this policy to low level database access policies for access decisions on another part of the database. We implement and evaluate our idea over a synthetic database and come up with efficient policy compilation and verification time.
Keyphrases
database access control xacml policy synthetic database several access control area underlying database access mechanism high level xacml policy access decision efficient policy compilation sensitive data though xacml convenient way verification time attribute information residing attribute-based access control policy attribute-based database access control low level database access policy
