A Security Punctuation Framework for Enforcing Access Control on Streaming Data

The management of privacy and security in the context of data stream management systems (DSMS) remains largely an unaddressed problem to date. Unlike in traditional DBMSs where access control policies are persistently stored on the server and tend to remain stable, in streaming applications the contexts and with them the access control policies on the real-time data may rapidly change. A person entering a casino may want to immediately block others from knowing his current whereabouts. We thus propose a novel "stream-centric" approach, where security restrictions are not persistently stored on the DSMS server, but rather streamed together with the data. Here, the access control policies are expressed via security constraints (called security punctuations, or short, sps) and are embedded into data streams. The advantages of the sp model include flexibility, dynamicity and speed of enforcement. DSMSs can adapt to not only data-related but also security-related selectivities, wh...

• Type: Conference
• Year: 2008
• Where: ICDE
• Authors: Rimma V. Nehme, Elke A. Rundensteiner, Elisa Bertino
• Keywords: Access Control Enforcement, Access Control Policies, Database, ICDE 2008, Real Dsms