XML security – A comparative literature review

Ekelhart, Andreas; Fenz, Stefan; Goluch, Gernot; Steinkellner, Markus; Weippl, Edgar

doi:10.1016/j.jss.2007.12.763

Cited by 23 publications

(7 citation statements)

References 34 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…However, the method in [7] is based on XACML which is an open standard; while ERM is built upon Microsofts generally proprietary Windows Rights Management Services (RMS) technology that works with RMS-enabled applications to help safeguard digital information from unauthorized use. In [3], the XML-based security standards will be used more and more in terms of an integrated security system, and the possible interaction of different standards was a basic goal in the evolution of XML-based security standards that include XACML and XML Security. The combined use of XACML, XML-ENC, and XML-DSIG in [7] is one more example of constructing an integrated security system focusing on secure, embedded, and fine-grained access control.…”

Section: Dep Of Information Science and Technologymentioning

confidence: 99%

Access control for healthcare data using extended XACML-SRBAC model

El-Aziz

Kannan

2012

2012 International Conference on Computer Communication and Informatics

View full text Add to dashboard Cite

In the modern health service, data are accessed by doctors and nurses using mobile, Personal Digital Assistants, and other electronic handheld devices. An individual's health related information is normally stored in a central health repository and it can be accessed only by authorized doctors. However, this Data is prone to be exposed to a number of mobile attacks while being accessed. This paper proposes a framework of using XACML and XML security to support secure, embedded and fine-grained access control policy to control the privacy and data access of health service data accessed through handheld devices. Also we consider one of the models, namely Spatial Role-based access control (SRBAC) and model it using XACML.

show abstract

Section: Dep Of Information Science and Technologymentioning

confidence: 99%

Access control for healthcare data using extended XACML-SRBAC model

El-Aziz

Kannan

2012

2012 International Conference on Computer Communication and Informatics

View full text Add to dashboard Cite

show abstract

“…As noted in [21], the XML-based security standards will be used more and more in terms of an integrated security system, and the possible interaction of different standards was a basic goal in the evolution of XML-based security standards. The framework's combined use of XACML, XML-ENC, XML-DSIG, and XKMS is one more example of constructing an integrated security system, with a focus on secure, embedded, and fine-grained access control.…”

Section: Related Workmentioning

confidence: 99%

Towards an Integrated Embedded Fine-Grained Information Protection Framework

Hsieh

Masiane

2011

2011 International Conference on Information Science and Applications

View full text Add to dashboard Cite

To protect the security and privacy of sensitive digital information, it is often necessary to employ a variety of security mechanisms such as encryption, integrity control, authentication, and access control. This paper describes a framework that extends eXtensible Access Control Markup Language (XACML) for use as a container for embedding access control policy with the digital content in the same XACML document. The digital content can be further divided into multiple parts, each of which is encapsulated by its own access control policy. This integrated XACML policy and content document is further protected by using XML Encryption (XML-ENC) and XML Signature (XML-DSIG) mechanisms, as well as XML Key Management Specification (XKMS) for leveraging Public Key Infrastructure (PKI), all in support of the embedded and fine-grained structure.This framework and associated security mechanisms are designed primarily to facilitate the protection and sharing of sensitive information in transit and at rest, within and across organizational boundaries. This paper also describes a prototype implementation of the framework for feasibility study purpose.

show abstract

“…The XML Security standards have been used with XACML for access control by integrated security systems for Web services [18]. As noted in [18], the XML-based security standards will be used more and more in terms of an integrated security system, and the possible interaction of different standards was a basic goal in the evolution of XML-based security standards that include XACML and XML Security.…”

Section: A Related Workmentioning

confidence: 99%

“…As noted in [18], the XML-based security standards will be used more and more in terms of an integrated security system, and the possible interaction of different standards was a basic goal in the evolution of XML-based security standards that include XACML and XML Security. Our combined use of XACML, XML-ENC and XML-DSIG is one more example of constructing an integrated security system, with our scheme focusing on secure, embedded, and fine-grained access control.…”

Section: A Related Workmentioning

confidence: 99%

Supporting Secure Embedded Access Control Policy with XACML+XML Security

Hsieh

Meeks

Marvel

2010

2010 5th International Conference on Future Information Technology

View full text Add to dashboard Cite

XACML has become the de facto standard for expressing access control policy. Similarly, XML security standards, such as XML encryption and XML digital signature, have been widely deployed for protecting the confidentiality, authenticity and integrity of digital information. In this paper we present a framework of using XACML and XML security to support secure, embedded and fine-grained access control policy. The basic idea is to extend XACML such that access control policy can be embedded with the digital content in the same XACML document. The original content can be further divided into multiple parts, each of which is encapsulated by its own access control policy. The integrated XACML policy and content document is further protected using XML encryption and digital signature. This framework and associated security methods are designed to facilitate the protection, management and sharing of sensitive information.

show abstract

XML security – A comparative literature review

Cited by 23 publications

References 34 publications

Access control for healthcare data using extended XACML-SRBAC model

Access control for healthcare data using extended XACML-SRBAC model

Towards an Integrated Embedded Fine-Grained Information Protection Framework

Supporting Secure Embedded Access Control Policy with XACML+XML Security

Contact Info

Product

Resources

About