@inproceedings{bb5301d76a274bb9b5d8a3432a1dcdd4,
title = "MyABDAC: Compiling XACML policies for attribute-based database access control",
abstract = "Attribute-based Access Control (ABAC) based on XACML can substantially improve the security and management of access rights on databases. However, existing implementations rely on high-level policy interpretation and are not as efficient as mechanisms natively supported by commodity databases. In this paper we explore advantages and challenges arising from compiling XACML policies for database access into Access Control Lists (ACLs) natively supported by the database. The main contributions are an architecture and algorithms for efficiently addressing incremental changes in attributes that could trigger changes to the ACLs. We consider this in a context of reflective database access control where attributes used in access decisions are stored in the database itself. Our implementation and experiments demonstrate a significant improvement in access decision times compared to the best available optimizations for general XACML access engines.",
keywords = "Access control list, Attribute, Database, MySQL, XACML",
author = "Sonia Jahid and Carl Gunter and Imranul Hoque and Hamed Okhravi",
year = "2011",
doi = "10.1145/1943513.1943528",
language = "English (US)",
isbn = "9781450304665",
series = "CODASPY'11 - Proceedings of the 1st ACM Conference on Data and Application Security and Privacy",
pages = "97--108",
booktitle = "CODASPY'11 - Proceedings of the 1st ACM Conference on Data and Application Security and Privacy",
note = "1st ACM Conference on Data and Application Security and Privacy, CODASPY'11 ; Conference date: 21-02-2011 Through 23-02-2011",
}