TY - GEN
T1 - A general approach to securely querying XML
AU - Damiani, Ernesto
AU - Fansi, Majirus
AU - Gabillon, Alban
AU - Marrara, Stefania
N1 - Funding Information:
This work was supported in part by the Italian Basic Research Fund (FIRB) within the TEKNE project and by funding from the French ministry for research under “ACI Sécurité Informatique 2003–2006. Projet CASC”. Majirus Fansi holds a Ph.D scholarship granted by the “Conseil Général des Landes”.
PY - 2007
Y1 - 2007
N2 - Access control models for XML data can be classified in two major categories: node filtering and query rewriting systems. The first category includes approaches that use access policies to compute secure user view on XML data sets. User queries are then evaluated on those views. In the second category of approaches, authorization rules are used to transform user queries to be evaluated against the original XML dataset. The aim of this paper is to describe a general query rewriting technique to securely querying XML. The model specification is given using a Finite State Automata, ensuring generality and easiness of standardization w.r.t. specific implementation techniques.
AB - Access control models for XML data can be classified in two major categories: node filtering and query rewriting systems. The first category includes approaches that use access policies to compute secure user view on XML data sets. User queries are then evaluated on those views. In the second category of approaches, authorization rules are used to transform user queries to be evaluated against the original XML dataset. The aim of this paper is to describe a general query rewriting technique to securely querying XML. The model specification is given using a Finite State Automata, ensuring generality and easiness of standardization w.r.t. specific implementation techniques.
UR - http://www.scopus.com/inward/record.url?scp=58149134211&partnerID=8YFLogxK
M3 - Conference contribution
AN - SCOPUS:58149134211
SN - 9789728865962
T3 - Proceedings of the 5th International Workshop on Security in Information Systems - WOSIS 2007; In Conjunction with ICEIS 2007
SP - 115
EP - 122
BT - Proceedings of the 5th International Workshop on Security in Information Systems - WOSIS 2007; In Conjunction with ICEIS 2007
T2 - 5th International Workshop on Security in Information Systems - WOSIS 2007; In Conjunction with ICEIS 2007
Y2 - 12 June 2007 through 13 June 2007
ER -