Access control in data management systems
By: Elena Ferrari
Series: Synthesis lectures on data management -- # 4
Publisher: Morgan & Claypool
Published: 2010
Place of publication: San Rafael, Calif. (1537 Fourth Street, San Rafael, CA 94901 USA)
Language: eng
Format: [electronic resource] /
Number of pages: 103
ISBN-13: 9781608453764; 9781608453757
Subjects: Database management; Access control
Other titles: Synthesis digital library of engineering and computer science.
Description: Access control is one of the fundamental services that any Data Management System should provide. Its main goal is to protect data from unauthorized read and write operations. This is particularly crucial in today's open and interconnected world, where each kind of information can be easily made available to a huge user population, and where a damage or misuse of data may have unpredictable consequences that go beyond the boundaries where data reside or have been generated. This book provides an overview of the various developments in access control for data management systems. Discretionary, mandatory, and role-based access control will be discussed, by surveying the most relevant proposals and analyzing the benefits and drawbacks of each paradigm in view of the requirements of different application domains. Access control mechanisms provided by commercial Data Management Systems are presented and discussed. Finally, the last part of the book is devoted to discussion of some of the most challenging and innovative research trends in the area of access control, such as those related to the Web 2.0 revolution or to the Database as a Service paradigm. This book is a valuable reference for an heterogeneous audience. It can be used as either an extended survey for people who are interested in access control or as a reference book for senior undergraduate or graduate courses in data security with a special focus on access control. It is also useful for technologists, researchers, managers, and developers who want to know more about access control and related emerging trends.
Notes: Part of: Synthesis digital library of engineering and computer science.

Title from PDF t.p. (viewed on June 4, 2010).

Series from website.

Includes bibliographical references (p. 89-101).

Abstract freely available; full-text restricted to subscribers or individual document purchasers.

Also available in print.

Mode of access: World Wide Web.

System requirements: Adobe Acrobat Reader.
Table of contents: title: 1. Access control: basic concepts; title: Introduction; title: Historical prospective; title: Data protection; title: Basic components; title: Access control policies; title: Access authorizations; title: Authorization subjects; title: Authorization objects; title: Authorization privileges; title: Authorizations: further components; title: Administration policies; title: Access control models; title: 2. Discretionary access control for relational data management systems; title: The access matrix model; title: The System R access control model; title: Grant command; title: Revoke command; title: Authorization storage; title: Authorization management and enforcement; title: Recursive revocation; title: Authorizations on views; title: DAC support in SQL; title: Extensions to the System R access control model; title: Positive and negative authorizations; title: Temporal authorizations; title: Oracle virtual private database; title: 3. Discretionary access control for advanced data models; title: Access control for object DMSs; title: Access control for XML data; title: Access control requirements; title: Access control models; title: Efficiency of access control; title: 4. Mandatory access control; title: Bell and LaPadula model; title: Multilevel relational data model; title: Mandatory access control for object DMSs; title: MAC vs DAC; title: Information-flow control models; title: 5. Role-based access control; title: The ANSI/INCITS RBAC standard; title: Core RBAC; title: Hierarchical RBAC; title: Constrained RBAC; title: RBAC support in SQL; title: Role administration; title: RBAC extensions; title: 6. Emerging trends in access control; title: Access control under the database as a service model; title: Access control for data stream management systems; title: Access control in the Web 2.0 era; title: OSN access control requirements; title: Proposed solutions; title: Further research directions in access control; title: Bibliography; title: Author's biography.