Flow Policies: Specification and Enforcement

Get BibTex-formatted data

Download

PDF

Author

Elisa Bertino, Elena Ferrari, Giovanni Mella

Entry type

inproceedings

Abstract

This paper deals with the problem of secure cooperative updates for XML documents in distributed systems. In particular, we introduce the basic notions underlying a flow language by using which a user can specify the flow that a given XML document has to follow within a group of cooperative subjects. A key feature of the flow language is to be based on the notion of subject credentials. In addition, we describe a policy language to specify special-purpose authorizations allowing selected subjects to modify or extend a given document flow. Finally, we briefly describe the protocols for verifying that the path followed by a document in a collaborative group agrees with the specified flow and to verify that modifications on a given flow are in accordance with the specified authorizations.

Download

PDF

Date

2004 – 04

Key alpha

bertino

Publisher

IEEE Computer Society

Affiliation

CERIAS Purdue University, University of Insubria-Como, University of Milano

Publication Date

2004-04-01

Isbn

0-7803-8396-6

Issn

1097-2641

Keywords

XML security

BibTex-formatted data

To refer to this entry, you may select and copy the text below and paste it into your BibTex document. Note that the text may not contain all macros that BibTex supports.

@Inproceedings{ bertino,
	title = "Flow Policies: Specification and Enforcement",
	author = "Elisa Bertino, Elena Ferrari, Giovanni Mella",
	year = "2004",
	month = "04",
	publisher = "IEEE Computer Society",
	abstract = "This paper deals with the problem of secure cooperative updates for XML documents in distributed systems. In particular, we introduce the basic notions underlying a flow language by using which a user can specify the flow that a given XML document has to follow within a group of cooperative subjects. A key feature of the flow language is to be based on the notion of subject credentials. In addition, we describe a policy language to specify special-purpose authorizations allowing selected subjects to modify or extend a given document flow. Finally, we briefly describe the protocols for verifying that the path followed by a document in a collaborative group agrees with the specified flow and to verify that modifications on a given flow are in accordance with the specified authorizations.",
	affiliation = "CERIAS Purdue University, University of Insubria-Como, University of Milano",
	isbn = "0-7803-8396-6",
	issn = "1097-2641",
	keywords = "XML security",
}