A Model for Evaluation and Administration of Security in Object-Oriented Databases

Eduardo B. Fernandez; Ehud Gudes; Haiyan Song

doi:10.1109/69.277771

A Model for Evaluation and Administration of Security in Object-Oriented Databases

Eduardo B. Fernandez, Ehud Gudes, Haiyan Song

Department of Computer Science

Research output: Contribution to journal › Article › peer-review

40 Scopus citations

Abstract

The integration of object-oriented programming concepts with databases is one of the most significant advances in the evolution of database systems. Many aspects of such a combination have been studied, but there are few models to provide security for this richly structured information. We develop here an authorization model for object-oriented databases. This model consists of a set of policies, a structure for authorization rules, and algorithms to evaluate access requests against the authorization rules. User access policies are based on the concept of inherited authorization applied along the class structure hierarchy. We propose also a set of administrative policies that allow the control of user access and its decentralization. Finally, we study the effect of class structuring changes on authorization.

Original language	English
Pages (from-to)	275-292
Number of pages	18
Journal	IEEE Transactions on Knowledge and Data Engineering
Volume	6
Issue number	2
DOIs	https://doi.org/10.1109/69.277771
State	Published - 1 Jan 1994

Keywords

Authorization models
database security
objectoriented databases
security administration
security of object-oriented systems

ASJC Scopus subject areas

Information Systems
Computer Science Applications
Computational Theory and Mathematics

Access to Document

10.1109/69.277771

Cite this

@article{972b41da918a4690a18d480fd66fa8f5,

title = "A Model for Evaluation and Administration of Security in Object-Oriented Databases",

abstract = "The integration of object-oriented programming concepts with databases is one of the most significant advances in the evolution of database systems. Many aspects of such a combination have been studied, but there are few models to provide security for this richly structured information. We develop here an authorization model for object-oriented databases. This model consists of a set of policies, a structure for authorization rules, and algorithms to evaluate access requests against the authorization rules. User access policies are based on the concept of inherited authorization applied along the class structure hierarchy. We propose also a set of administrative policies that allow the control of user access and its decentralization. Finally, we study the effect of class structuring changes on authorization.",

keywords = "Authorization models, database security, objectoriented databases, security administration, security of object-oriented systems",

author = "Fernandez, {Eduardo B.} and Ehud Gudes and Haiyan Song",

note = "Funding Information: Manuscript received September 18, 1990; revised August 13, 1991, and January 6, 1992. This work was supported by the Florida High Technology and Industry Council through Professor S. Y. W. Su. E. B. Femandez is with the Department of Computer Science and Engineering, Florida Atlantic University, Boca Raton, FL. 33431. E. Gudes is with Ben Gurion University, Beersheva, Israel. H. Song is with Informix Software, Inc., Menlo Park, CA. IEEE Log Number 9213356.",

year = "1994",

month = jan,

day = "1",

doi = "10.1109/69.277771",

language = "English",

volume = "6",

pages = "275--292",

journal = "IEEE Transactions on Knowledge and Data Engineering",

issn = "1041-4347",

publisher = "Institute of Electrical and Electronics Engineers",

number = "2",

}

TY - JOUR

T1 - A Model for Evaluation and Administration of Security in Object-Oriented Databases

AU - Fernandez, Eduardo B.

AU - Gudes, Ehud

AU - Song, Haiyan

N1 - Funding Information: Manuscript received September 18, 1990; revised August 13, 1991, and January 6, 1992. This work was supported by the Florida High Technology and Industry Council through Professor S. Y. W. Su. E. B. Femandez is with the Department of Computer Science and Engineering, Florida Atlantic University, Boca Raton, FL. 33431. E. Gudes is with Ben Gurion University, Beersheva, Israel. H. Song is with Informix Software, Inc., Menlo Park, CA. IEEE Log Number 9213356.

PY - 1994/1/1

Y1 - 1994/1/1

N2 - The integration of object-oriented programming concepts with databases is one of the most significant advances in the evolution of database systems. Many aspects of such a combination have been studied, but there are few models to provide security for this richly structured information. We develop here an authorization model for object-oriented databases. This model consists of a set of policies, a structure for authorization rules, and algorithms to evaluate access requests against the authorization rules. User access policies are based on the concept of inherited authorization applied along the class structure hierarchy. We propose also a set of administrative policies that allow the control of user access and its decentralization. Finally, we study the effect of class structuring changes on authorization.

AB - The integration of object-oriented programming concepts with databases is one of the most significant advances in the evolution of database systems. Many aspects of such a combination have been studied, but there are few models to provide security for this richly structured information. We develop here an authorization model for object-oriented databases. This model consists of a set of policies, a structure for authorization rules, and algorithms to evaluate access requests against the authorization rules. User access policies are based on the concept of inherited authorization applied along the class structure hierarchy. We propose also a set of administrative policies that allow the control of user access and its decentralization. Finally, we study the effect of class structuring changes on authorization.

KW - Authorization models

KW - database security

KW - objectoriented databases

KW - security administration

KW - security of object-oriented systems

UR - http://www.scopus.com/inward/record.url?scp=0028404874&partnerID=8YFLogxK

U2 - 10.1109/69.277771

DO - 10.1109/69.277771

M3 - Article

AN - SCOPUS:0028404874

SN - 1041-4347

VL - 6

SP - 275

EP - 292

JO - IEEE Transactions on Knowledge and Data Engineering

JF - IEEE Transactions on Knowledge and Data Engineering

IS - 2

ER -

A Model for Evaluation and Administration of Security in Object-Oriented Databases

Abstract

Keywords

ASJC Scopus subject areas

Access to Document

Other files and links

Fingerprint

Cite this