A Security Model for Access Control in Graph-Oriented Databases

Morgado, Cláudia do Rosário Vaz; Baioco, Gisele Busichia; Basso, Tânia; Moraes, Regina

doi:10.1109/qrs.2018.00027

Cited by 11 publications

(4 citation statements)

References 8 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Morgado et al (2018) introduced a model-based approach using metadata with authorization rules to control access in applications that use graph databases. It provides a predefined schema for the graph nodes in addition to data definition language and data manipulation language operations.…”

Section: Graph Databasesmentioning

confidence: 99%

A systematic literature review of authorization and access control requirements and current state of the art for different database models

Mohamed,

Auer,

Hofer

et al. 2023

IJWIS

View full text Add to dashboard Cite

Purpose Data protection requirements heavily increased due to the rising awareness of data security, legal requirements and technological developments. Today, NoSQL databases are increasingly used in security-critical domains. Current survey works on databases and data security only consider authorization and access control in a very general way and do not regard most of today’s sophisticated requirements. Accordingly, the purpose of this paper is to discuss authorization and access control for relational and NoSQL database models in detail with respect to requirements and current state of the art. Design/methodology/approach This paper follows a systematic literature review approach to study authorization and access control for different database models. Starting with a research on survey works on authorization and access control in databases, the study continues with the identification and definition of advanced authorization and access control requirements, which are generally applicable to any database model. This paper then discusses and compares current database models based on these requirements. Findings As no survey works consider requirements for authorization and access control in different database models so far, the authors define their requirements. Furthermore, the authors discuss the current state of the art for the relational, key-value, column-oriented, document-based and graph database models in comparison to the defined requirements. Originality/value This paper focuses on authorization and access control for various database models, not concrete products. This paper identifies today’s sophisticated – yet general – requirements from the literature and compares them with research results and access control features of current products for the relational and NoSQL database models.

show abstract

Section: Graph Databasesmentioning

confidence: 99%

A systematic literature review of authorization and access control requirements and current state of the art for different database models

Mohamed,

Auer,

Hofer

et al. 2023

IJWIS

View full text Add to dashboard Cite

show abstract

“…A security model for access control in graph‐based NoSQL databases is proposed in Morgado et al The goal is to preserve data integrity by protecting the stored data from unauthorized access. Graphs are created as instances of model for implementing access control.…”

Section: Related Workmentioning

confidence: 99%

Security assessment of data management systems for cyber physical system applications

Chaudhry

Yousaf

Khan

2019

J Software Evolu Process

View full text Add to dashboard Cite

Cyber physical system (CPS) applications are widely used to control critical infrastructure of various application domains, eg, medical health care, energy, and power, to name a few. Such applications usually take input data from sensors, estimate current state of the system, and then based on the estimation, make critical decisions to control the underlying infrastructure automatically. Therefore, security and integrity of the (system state) data are critically important to ensure safe operations of CPS. In this paper, we present a review of security of various data management systems used in CPS. Since CPS are composed of systems of (sub)systems that generate a huge amount of data (ie, periodical sensor input data), therefore, recently, NoSQL and NewSQL data management systems have emerged as popular data management systems to support efficient and scalable analysis of unstructured data. Unfortunately, these systems were not initially build for data security and thus are vulnerable to numerous security attacks. Considering flexible data model and efficient access methods in NoSQL and NewSQL, we discuss the security attacks on such data management systems and their corresponding solutions to mitigate them. In particular, we analyze the system and data security of popular NoSQL and NewSQL systems. To analyze that, we defined feature vectors for system and data security and compared the data systems against them. Finally, we propose security solutions for data management systems by identifying various security vulnerabilities in internal security algorithms of such systems. KEYWORDSaccess control security, CPS, data integrity, data security INTRODUCTIONIndustry 4.0 has led to the development of cyber physical systems (CPSs). A typical CPS consists of cyber and physical components, where cyber components are responsible for controlling physical components (respectively process) of an underlying critical infrastructure. The cyber components receive sensor data as an input to estimate current state of the physical components. Based on the state estimation, the cyber components make decisions (ie, issue commands) to change the state of the physical process. With the recent trend towards affordable sensors, fast communication networks, and better data acquisition methods, massive amount of data is generated by various sensors and autonomous resources in a CPS. This huge volume of data needs big data processing and management techniques. This introduces challenges related to the performance, security, reliability, scalability, and fault tolerance of a system. Since a CPS makes decision based on sensor input data, such data needs to be protected against various security attacks to ensure reliable and safe data operations. In this paper, we review the security of various data management systems that are used to store process data in a CPS. Modern CPS uses NoSQL and NewSQL systems to store data in order to assure reliable and efficient (ie, with strict time requirements) CPS operations. The increased data access has increa...

show abstract

“…To improve security in graph-based databases, the work [30] proposed a security model that performs access control for NoSQL graph-oriented database. The proposed model uses metadata and provides Data Definition Language (DDL) and Data Manipulation Language (DML) operations.…”

Section: Access Control Models In Nosql Databasesmentioning

confidence: 99%

“…Maximum granularity Access control model [23] Column-based database Filed - [24] Document-based databases (MongoDB) Document RBAC [25] Document-based databases (MongoDB) Filed RBAC [28] All databases that support SQL++ Filed ABAC [27] All types -ABAC [30] Graph-based databases -- [31] Graph-based databases (Neo4j) --…”

Section: Target Databasementioning

confidence: 99%

Access Control Models in NoSQL Databases: An Overview

Alotaibi¹

2019

JKAU Comp IT Sci

View full text Add to dashboard Cite

Recently non-relational databases known as NoSQL have become most popular for handling a huge amount of data. Many organizations move from relational databases towards NoSQL databases due to the growing popularity of cloud computing and big data. NoSQL database is designed to handle unstructured data like documents, e-mails, and social media efficiently. It uses distributed and cooperating devices to store and retrieve data. As a large number of people storing sensitive data in NoSQL databases, security issues become critical concerns. NoSQL has many advantages like scalability and availability, but it suffers from some security issues like weak authorization mechanisms. This paper reviews the different models of NoSQL databases and the security issues concerning these databases. In addition, we present the existing access control models in different NoSQL databases.

show abstract

A Security Model for Access Control in Graph-Oriented Databases

Cited by 11 publications

References 8 publications

A systematic literature review of authorization and access control requirements and current state of the art for different database models

A systematic literature review of authorization and access control requirements and current state of the art for different database models

Security assessment of data management systems for cyber physical system applications

Access Control Models in NoSQL Databases: An Overview

Contact Info

Product

Resources

About