QFilter: fine-grained run-time XML access control via NFA-based query rewriting
QFilter: fine-grained run-time XML access control via NFA-based query rewriting
复制标题
QFilter：通过基于 NFA 的查询重写进行细粒度运行时 XML 访问控制
DOI：
10.1145/1031171.1031273
复制
发表时间：
2004
期刊：
影响因子：
--
通讯作者：
Peng Liu
中科院分区：
文献类型：
--
作者：
Bo Luo;Dongwon Lee;Wang;Peng Liu
目前，大多数最先进的XML访问控制解决方案要么是（1）文档级访问控制技术，这些技术太有限，无法支持细粒度的安全实施;要么是基于视图的方法，创建和维护成本往往很高;要么是（3）不切实际的建议，需要底层XML数据库提供大量与安全相关的支持。在本文中，我们采取了不同的方法，假设没有安全支持的底层XML数据库和检查三种替代细粒度的XML访问控制解决方案，即<i>原始的，预处理</i>和<i>后处理</i>的方法。特别是，我们提倡一种称为<i>QFilter的</i>预处理方法，该方法使用非确定性有限自动机（NFA）重写用户的查询，从而修剪任何违反访问控制规则的部分。我们展示了一个QFilter的构造和执行，并证明了它比其他竞争方法的优越性。
At present, most of the state-of-the-art solutions for XML access controls are either (1) document-level access control techniques that are too limited to support fine-grained security enforcement; (2) view-based approaches that are often expensive to create and maintain; or (3) impractical proposals that require substantial security-related support from underlying XML databases. In this paper, we take a different approach that assumes no security support from underlying XML databases and examine three alternative fine-grained XML access control solutions, namely <i>primitive, pre-processing</i> and <i>post-processing</i> approaches. In particular, we advocate a pre-processing method called <i>QFilter</i> that uses Non-deterministic Finite Automata (NFA) to rewrite user's query such that any parts violating access control rules are pruned. We show the construction and execution of a QFilter and demonstrate its superiority to other competing methods.