A Flexible Mandatory Access Control Policy for XML Databases

Abstract

A flexible mandatory access control policy (MAC) for XML databases is presented in this paper. The label type and label access policy can be defined according to the requirements of applications. In order to preserve the integrity of data in XML databases, a constraint between a read access rule and a write access rule in label access policy is introduced. Rules for label assignment and propagation are proposed to alleviate the workload of label assignment. Also, a solution for resolving conflicts of label assignments is proposed. At last, operations for implementation of the MAC policy in a XML database are illustrated.

Performance Evaluation of Trust Based Access Control for XML Databases

“…Many access control models have been proposed and used. The traditional types are discretionary access control (DAC), mandatory access control (MAC), and role base access Control (RBAC) [1][2][3][4][5]. There are many other types that are non-traditional, such as function based access control and purpose based access control [6,7].…”

Time cost evaluation of trust based access control for XML databases

“…Access control models for XML databases can be categorized into the discretionary access control model (DAC) [8], the mandatory access control model (MAC) [6,7], and role based access control (RBAC) [4,5,6,7,8]. Traditional access models are limited in that they are static and focused mostly on protection from outsiders.…”