Towards a Fine-Grained Access Control Model and Mechanisms for Semantic Databases

Get BibTex-formatted data

Author

Elisa Bertino, Stefano Franzoni, Pietro Mazzoleni, Stefano Valtolina

Entry type

conference

Abstract

A growing number of domains are adopting semantic models as a centralized gateway to heterogeneous data sources, or directly for modeling and managing relevant information. In such contexts, it is crucial to grant access to the semantic model and its data only to the authorized users. In this paper, we present a fine-grained access control model specifically tailored to semantic models. One of the relevant features of the model is the granularity of the resources that can be protected. Access control can be enforced at the level of both the modelâ€™s concepts and the conceptsâ€™ instances by means of a query rewriting strategy. The proposed model has been implemented adopting the XACML standard and the SeRQL query language; services exposed by the implementation can be used to transparetly integrate authorization into existing systems.

Date

2007

URL

http://csdl2.computer.org/pers ... DOI=10.1109/ICWS.2007.176

Booktitle

IEEE International Conference on Web Services

Key alpha

Bertino

Affiliation

Purdue University

Publication Date

2007-00-00

BibTex-formatted data

To refer to this entry, you may select and copy the text below and paste it into your BibTex document. Note that the text may not contain all macros that BibTex supports.

@Conference{ Bertino,
	title = "Towards a Fine-Grained Access Control Model and Mechanisms for Semantic Databases",
	author = "Elisa Bertino, Stefano Franzoni, Pietro Mazzoleni, Stefano Valtolina",
	year = "2007",
	booktitle = "IEEE International Conference on Web Services",
	abstract = "A growing number of domains are adopting semantic models as a centralized gateway to heterogeneous data sources, or directly for modeling and managing relevant information. In such contexts, it is crucial to grant access to the semantic model and its data only to the authorized users. In this paper, we present a fine-grained access control model specifically tailored to semantic models. One of the relevant features of the model is the granularity of the resources that can be protected. Access control can be enforced at the level of both the modelâ€™s concepts and the conceptsâ€™ instances by means of a query rewriting strategy. The proposed model has been implemented adopting the XACML standard and the SeRQL query language; services exposed by the implementation can be used to transparetly integrate authorization into existing systems.",
	affiliation = "Purdue University",
	url = "http://csdl2.computer.org/persagen/DLAbsToc.jsp?resourcePath=/dl/proceedings/&toc=comp/proceedings/icws/2007/2924/00/2924toc.xml&DOI=10.1109/ICWS.2007.176",
}