We found a match
Your institution may have access to this item. Find your institution then sign in to continue.
- Title
QFilter: rewriting insecure XML queries to secure ones using non-deterministic finite automata.
- Authors
Bo Luo; Dongwon Lee; Wang-Chien Lee; Peng Liu
- Abstract
In this paper, we ask whether XML access control can be supported when underlying (XML or relational) storage system does not provide adequate security features and propose three alternative solutions - primitive, pre-processing, and post-processing. Toward that scenario, in particular, we advocate a scalable and effective pre-processing approach, called QFilter. QFilter is based on non-deterministic finite automata (NFA) and rewrites user's queries such that parts violating access control rules are pre-pruned. Through analysis and experimental validation, we show that (1) QFilter guarantees that only permissible portion of data is returned to the authorized users, (2) such access controls can be efficiently enforced without relying on security features of underlying storage system, and (3) such independency makes QFilter capable of many emerging applications, such as in-network access control and access control outsourcing.
- Subjects
SEQUENTIAL machine theory; REWRITING systems (Computer science); XML (Extensible Markup Language); QUERYING (Computer science); ACCESS control; ELECTRONIC information resources
- Publication
VLDB Journal International Journal on Very Large Data Bases, 2011, Vol 20, Issue 3, p397
- ISSN
1066-8888
- Publication type
Article
- DOI
10.1007/s00778-010-0202-x