A flexible mandatory access control policy for XML databases

A flexible mandatory access control policy (MAC) for XML databases is presented in this paper. The label type and label access policy can be defined according to the requirements of applications. In order to preserve the integrity of data in XML databases, a constraint between a read access rule and a write access rule in label access policy is introduced. Rules for label assignment and propagation are proposed to alleviate the workload of label assignment. Also, a solution for resolving conflicts of label assignments is proposed. At last, operations for implementation of the MAC policy in a XML database are illustrated. Categories and Subject Descriptors H.2.0 [Database Management]:Security, integrity and protection General Terms Management, Security Keywords Database Security, XML database, Mandatory access control

• Type: Conference
• Year: 2007
• Where: INFOSCALE
• Authors: Hong Zhu, Renchao Jin, Kevin Lü
• Keywords: Information Management, INFOSCALE 2007, Label Access Policy, Label Assignments, XML Database