A Rule-Based Relational XML Access Control Model in the Presence of Authorization Conflicts
There is considerable amount of sensitive XML data stored in relational databases. It is a challenge to enforce node level fine-grained authorization policies for XML data stored in relational databases which typically support table and column level access control. Moreover, it is common to have conflicting authorization policies over the hierarchical nested structure of XML data. There are a couple of XML access control models for relational XML databases proposed in the literature. However, to our best knowledge, none of them discussed handling authorization conflicts with conditions in the domain of relational XML databases. Therefore, we believe that there is a need to define and incorporate effective fine-grained XML authorization models with conflict handling mechanisms in the presence of conditions into relational XML databases. We address this issue in this study.
Code (0)
등록된 구현이 없습니다.
Similar Papers 제목 키워드 기반
An Automatic Attribute Based Access Control Policy Extraction from Access Logs
With the rapid advances in computing and information technologies, traditional access control models have become inadequate in terms of capturing fine-grained, and expressive security requirements of newly emerging appli…
AttributeRisk-Aware Fine-Grained Access Control in Cyber-Physical Contexts
Access to resources by users may need to be granted only upon certain conditions and contexts, perhaps particularly in cyber-physical settings. Unfortunately, creating and modifying context-sensitive access control solut…
Overlaying Governance: A Compositional Authorization Framework for Delegation and Scope in Agentic AI
As AI systems evolve from passive models into autonomous active agents capable of initiating actions, collaborating, and delegating tasks, the traditional boundaries of software systems blur. Traditional authorization an…
Delegated Authorization for Agents Constrained to Semantic Task-to-Scope Matching
Authorizing Large Language Model driven agents to dynamically invoke tools and access protected resources introduces significant risks, since current methods for delegating authorization grant overly broad permissions an…
Identity Management for Agentic AI: The new frontier of authorization, authentication, and security for an AI agent world
The rapid rise of AI agents presents urgent challenges in authentication, authorization, and identity management. Current agent-centric protocols (like MCP) highlight the demand for clarified best practices in authentica…