Abstract:In this paper, our objeetive is to define a seeurity model for regulating aeeess to XML documents. Our model offers a seeurity poliey with a great expressive power. An XML document is represented by a tree. Nodes of this tree are of different type (element, attribute, text, comment...etc). The smaIlest protection granularity of our model is the node, that is, authorisation rules granting or denying access to a single node can be defined. The authorisation mIes related to a specific XML document are first defined on aseparate Authorisation sheet. This Authorisation sheet is then translated into an XSLT sheet. If a user requests access to the XML doeument then the XSLT processor uses the XSLT sheet to provide the user with a view of the XML document which is eompatible with his rights.

No abstract

No abstract

The message queuing telemetry transport (MQTT) protocol is becoming the main protocol for the internet of things (IoT). In this paper, we define a highly expressive attribute-based access control (ABAC) security model for the MQTT protocol. Our model allows us to regulate not only publications and subscriptions, but also distribution of messages to subscribers. We can express various types of contextual security rules (temporal security rules, content-based security rules, rules based on the frequency of events, etc.).

Abstract. Trees are very often used to structure data. For instance, file systems are structured into trees and XML documents can be represented by trees. There are literally as many access control schemes as there are tree data structures. Consequently, an access control model which has been defined for a particular kind of tree cannot be easily adapted to another kind of tree. In this paper, we propose an access control model for generic tree data structures. This model can then be applied to any specific typed tree data structure.

No abstract

No abstract

No abstract