On Securely Manipulating XML Data - Inria - Institut national de recherche en sciences et technologies du numérique Access content directly
Conference Papers Year : 2012

On Securely Manipulating XML Data

Abstract

Over the past years several works have proposed access control models for XML data where only read-access rights over non-recursive DTDs are considered. A small number of works have studied the access rights for updates. In this paper, we present a general model for specifying access control on XML data in the presence of the update operations of W3C XQuery Update Facility. Our approach for enforcing such update specification is based on the notion of query rewriting. A major issue is that query rewriting for recursive DTDs is still an open problem. We show that this limitation can be avoided using only the expressive power of the standard XPath, and we propose a linear algorithm to rewrite each update operation defined over an arbitrary DTD (recursive or not) into a safe one in order to be evaluated only over the XML data which can be updated by the user. This paper represents the first effort for securely XML updating in the presence of arbitrary DTDs (recursive or not) and a rich fragment of XPath.
No file

Dates and versions

hal-00759910 , version 1 (03-12-2012)

Identifiers

  • HAL Id : hal-00759910 , version 1

Cite

Houari Mahfoud, Abdessamad Imine. On Securely Manipulating XML Data. 5th International Symposium on Foundations & Practice of Security - FPS 2012, Oct 2012, Montréal, Canada. ⟨hal-00759910⟩
165 View
0 Download

Share

Gmail Facebook X LinkedIn More