论文信息 - Semantic-Aware Data Protection in Web Services

Semantic-Aware Data Protection in Web Services

This paper presents a method to remove the dependency of XML access control models on the syntactic representation of the XML trees. We propose a semantics-based approach, expressing XML access control on ontologies that describe the XML documents. The semanticsbased model is transformed to the syntactic representation on the actual XML instance. Our method supports the uniform enforcement of an authentication model on syntactically different but semantically equivalent XML documents. Contact Author: Csilla Farkas, Dept. of Computer Science and Engineering, University of South Carolina, Columbia, SC 29208. Telephone: 803-576-5762, Fax: 803-777-3767, email:farkas@cse.sc.edu

Bhavani Thuraisingham | Duminda Wijesekera | Anoop Singhal | Csilla Farkas | Amit Jain

[1] Csilla Farkas,et al. Secure XML Views , 2002, DBSec.

[2] Michiharu Kudo,et al. XML document security based on provisional authorization , 2000, CCS.

[3] John Mylopoulos,et al. Constructing Complex Semantic Mappings Between XML Data and Ontologies , 2005, SEMWEB.

[4] Duminda Wijesekera,et al. MLS-SMIL for Electronic Surveillance of Facilities with Multi-Level Security Requirements 2 , 2003 .

[5] Elisa Bertino,et al. Specifying and enforcing access control policies for XML document sources , 2004, World Wide Web.

[6] Sabrina De Capitani di Vimercati,et al. A fine-grained access control system for XML documents , 2002, TSEC.

[7] Phillip Hallam-Baker,et al. Web services security: soap message security , 2003 .

[8] Robert Richards,et al. Universal Description, Discovery, and Integration (UDDI) , 2006 .

[9] Duminda Wijesekera,et al. Enforcing Semantics-Aware Security in Multimedia Surveillance , 2005, J. Data Semant..