Supporting Multiple Access Control Policies in Database Systems

DMCA

Supporting Multiple Access Control Policies in Database Systems (1996)

Cached

Download Links

Other Repositories/Bibliography

DBLP

by Elisa Bertino , Sushil Jajodia , Pierangela Samarati

Venue:	ACM Transactions on Database Systems
Citations:	306 - 45 self

BibTeX

@ARTICLE{Bertino96supportingmultiple,
    author = {Elisa Bertino and Sushil Jajodia and Pierangela Samarati},
    title = {Supporting Multiple Access Control Policies in Database Systems},
    journal = {ACM Transactions on Database Systems},
    year = {1996},
    volume = {26},
    pages = {2001}
}

OpenURL

Abstract

Although there are several choices of policies for protection of information, access control models have been developed for a fixed set pre-defined access control policies that are then built into the corresponding access control mechanisms. This becomes a problem, however, if the access control requirements of an application are different from the policies built into a mechanism. In most cases, the only solution is to enforce the requirements as part of the application code, but this makes verification, modification, and adequate enforcement of these policies impossible. In this paper, we propose a flexible authorization mechanism that can support different security policies. The mechanism enforces a general authorization model onto which multiple access control policies can be mapped. The model permits negative and positive authorizations, authorizations that must be strongly obeyed and authorizations that allow for exceptions, and enforces ownership together with delegation of admin...

Keyphrases

multiple access control policy database system flexible authorization mechanism different security policy corresponding access control mechanism access control requirement adequate enforcement positive authorization several choice access control model enforces ownership general authorization model application code

DMCA