Access Control for Databases

Document Outline

• Introduction
  • An Historical Perspective
  • Recent Research Directions
  • Organization of the Monograph
• Background
  • Access Control Models
  • Cryptographic Preliminaries
  • Summary
• Foundations of Access Control for Relational Database Systems
  • The System R Access Control Model
  • Content-based Access Control
  • Mandatory Access Control Models
  • Summary
• Case Studies
  • SQL Server 2008
  • Oracle Virtual Private Database
  • Labeled Oracle
  • Summary
• Fine-Grained Access Control Models and Mechanisms
  • Fine Grained Access Control through Query Rewriting
  • SQL Language Extensions for Fine Grained Access Control
  • Fine Grained Access Control with Authorization Views
  • Summary
• PSAC: A Privilege State Based Access Control System
  • Motivation
  • Design and Implementation
  • Summary
• Protection from Insider Threats and Separation of Duties
  • Oracle Database Vault
  • Joint-Threshold Administration
  • Summary
• Access Control for Object Databases, XML Data and Novel Applications
  • Requirements
  • The Orion Authorization Model
  • MAC Models for Object Databases
  • Access Control Models for XML Data
  • Access Control Models for Geographical Data
  • Access Control Models for Digital Libraries
  • Summary
• Encryption-based Access Control
  • Encryption-based Access Control for XML Documents
  • Privacy-preserving Access Control Mechanisms
  • Summary
• Concluding Remarks and Research Directions
• References