The University of Illinois OAI-PMH Data Provider Registry [Home]

Sample Record from "International Journal of Computer Science: Theory and Application"

For Set "Articles" and Metadata Prefix "oai_dc" View Raw XML

identifier: oai:ojs.localhost:article/35
datestamp: 2014-10-30T16:39:33Z
setSpec: journal-of-computer-science:ART
title: Distributed and Typed Role-based Access Control Mechanisms Driven by CRUD Expressions
creator: Regateiro, Diogo Domingues; Instituto de Telecomunicações, University of Aveiro
creator: Aguiar, Rui Luís; Instituto de Telecomunicações, DETI, University of Aveiro
creator: Pereira, Óscar Mortágua
description: Business logics of relational databases applications are an important source of security violations, namely in respect to access control. The situation is particularly critical when access control policies are many and complex. In these cases, programmers of business logics can hardly master the established access control policies. Now we consider situations where business logics are built with tools such as JDBC and ODBC. These tools convey two sources of security threats: 1) the use of unauthorized Create, Read, Update and Delete (CRUD) expressions and also 2) the modification of data previously retrieved by Select statements. To overcome this security gap when Role-based access control policies are used, we propose an extension to the basic model in order to control the two sources of security threats. Finally, we present a software architectural model from which distributed and typed RBAC mechanisms are automatically built, this way relieving programmers from mastering any security schema. We demonstrate empirical evidence of the effectiveness of our proposal from a use case based on Java and JDBC.
publisher: International Journal of Computer Science: Theory and Application
date: 2014-10-30
type: info:eu-repo/semantics/article
type: info:eu-repo/semantics/publishedVersion
type: Peer-reviewed Article
format: application/pdf
source: International Journal of Computer Science: Theory and Application; Vol 2, No 1 (2014)
source: 2336-0984
language: eng
University of Illinois at Urbana-Champaign
University of Illinois at Urbana-Champaign
Grainger Engineering Library Information Center
Comments to: Tom Habing
University of Illinois at Urbana-Champaign Engineering Library
1301 West Springfield
Urbana, IL 61801
Phone: 217-244-4425
Updated on: 2018-10-12