TY - GEN
T1 - Users tracking and roles mining in web-based applications
AU - Gonen, Yaron
PY - 2011/1/1
Y1 - 2011/1/1
N2 - When a database is accessed via a web application, web-users are not connect directly to the database, but rather via the web application. From a database point of view, such a connection is always established by the same db-user (i.e. the web application's db-user) and specific data on the web-user is not available to the database. As a consequence, web-users' specific data cannot be audited and fine-grained access control cannot be implemented. We propose a method that provide the ability to track the web-users in web databases. The new method can be applied to legacy web applications without requiring any changes in their existing infrastructure. Using the tracked database, we propose a method to identify logical sessions (business logic), which we will use to mine the true users-roles of the web application.
AB - When a database is accessed via a web application, web-users are not connect directly to the database, but rather via the web application. From a database point of view, such a connection is always established by the same db-user (i.e. the web application's db-user) and specific data on the web-user is not available to the database. As a consequence, web-users' specific data cannot be audited and fine-grained access control cannot be implemented. We propose a method that provide the ability to track the web-users in web databases. The new method can be applied to legacy web applications without requiring any changes in their existing infrastructure. Using the tracked database, we propose a method to identify logical sessions (business logic), which we will use to mine the true users-roles of the web application.
UR - http://www.scopus.com/inward/record.url?scp=79955773054&partnerID=8YFLogxK
U2 - 10.1145/1966874.1966877
DO - 10.1145/1966874.1966877
M3 - Conference contribution
AN - SCOPUS:79955773054
SN - 9781450306966
T3 - ACM International Conference Proceeding Series
SP - 14
EP - 18
BT - Proceedings - Joint EDEBT/ICDT PhD Workshop 2011, PhD'11
PB - Association for Computing Machinery
T2 - Joint EDBT/ICDT Ph.D. Workshop 2011, PhD'11, Held in Conjunction with the 14th International Conference on Extending Database Technology, EDBT 2011 and the 14th International Conference on Database Theory, ICDT 2011
Y2 - 25 March 2011 through 25 March 2011
ER -