Incremental adaptation of XPath access control views

ABSTRACT

Materialized XPath access-control views are commonly used for enforcing access control. When access control rules defining a materialized XML access-control view change, the view must be adapted to reflect these changes. The process of updating a materialized view after its definition changes is referred to as view adaptation. While XPath security views have been widely reported in literature, the problem of view adaptation for XPath security views has not been addressed. View adaptation results in view downtime during which users are denied access to security views to prevent unauthorized access. Thus, efficient view adaptation is important for making XPath security views pragmatic. In this work, we show how to adapt an XPath access-control view incrementally by re-using the existing view, which reduces computation and communication costs significantly, and results in less downtime for the end-user. Empirical evaluations confirm that the incremental view adaptation algorithms presented in this paper are efficient and scalable.

REFERENCES

• 1: Galax xquery processor, available at http://db.bell-labs.com/galax.
• 2: Xmark benchmark schema, available at http://www.xml-benchmark.org/.
• 3: Xpath, available at http://www.w3.org/tr/xpath20.
• 4: A. Balmin, F. Ozcan, K. S. Beyer, R. J. Cochrane, and H. Pirahesh. A framework for using materialized xpath views in xml query processing. In VLDB Conference, 2004.
• 5: L. Bouganim, F. Ngoc, and P. Pucheral. Client-based access control management for xml documents. Technical report, INRIA, June 2004.
• 6: Ernesto Damiani , Sabrina de Capitani di Vimercati , Stefano Paraboschi , Pierangela Samarati, Design and implementation of an access control processor for XML documents, Computer Networks: The International Journal of Computer and Telecommunications Networking, v.33 n.1-6, p.59-75, June 2000
• 7: Wenfei Fan , Chee-Yong Chan , Minos Garofalakis, Secure XML querying with security views, Proceedings of the 2004 ACM SIGMOD international conference on Management of data, June 13-18, 2004, Paris, France [doi>10.1145/1007568.1007634]
• 8: Irini Fundulaki , Maarten Marx, Specifying access control policies for XML documents with XPath, Proceedings of the ninth ACM symposium on Access control models and technologies, June 02-04, 2004, Yorktown Heights, New York, USA [doi>10.1145/990036.990046]
• 9: J. Gao, D. Yang, and T. Wang. Efficient xml query rewriting over the multiple xml views. In Proceedings of the 17th Data Engineering Workshop, (DEWS '06), March 2006.
• 10: Giovanna Guerrini , Marco Mesiti , Daniele Rossi, Impact of XML schema evolution on valid documents, Proceedings of the 7th annual ACM international workshop on Web information and data management, November 04-04, 2005, Bremen, Germany [doi>10.1145/1097047.1097056]
• 11: A. Gupta and I. S. Mumick. Maintenance of materialized views: Problems, techniques and applications. IEEE Quarterly Bulletin on Data Engineering; Special Issue on Materialized Views and Data Warehousing, 18(2):3--18, 1995.
• 12: Ashish Gupta , Inderpal S. Mumick , Kenneth A. Ross, Adapting materialized views after redefinitions, Proceedings of the 1995 ACM SIGMOD international conference on Management of data, p.211-222, May 22-25, 1995, San Jose, California, United States
• 13: Gabriel Kuper , Fabio Massacci , Nataliya Rassadko, Generalized XML security views, Proceedings of the tenth ACM symposium on Access control models and technologies, June 01-03, 2005, Stockholm, Sweden [doi>10.1145/1063979.1063994]
• 14: Chung-Hwan Lim , Seog Park , Sang H. Son, Access control of XML documents considering update operations, Proceedings of the 2003 ACM workshop on XML security, October 31-31, 2003, Fairfax, Virginia [doi>10.1145/968559.968568]
• 15: Bo Luo , Dongwon Lee , Wang-Chien Lee , Peng Liu, QFilter: fine-grained run-time XML access control via NFA-based query rewriting, Proceedings of the thirteenth ACM international conference on Information and knowledge management, November 08-13, 2004, Washington, D.C., USA [doi>10.1145/1031171.1031273]
• 16: B. Luo, D. Lee, W.-C. Lee, and P. Liu. Deep set operators for xquery. In XIME-P, 2005.
• 17: Bhushan Mandhani , Dan Suciu, Query caching and view selection for XML databases, Proceedings of the 31st international conference on Very large data bases, August 30-September 02, 2005, Trondheim, Norway
• 18: Gerome Miklau , Dan Suciu, Containment and equivalence for a fragment of XPath, Journal of the ACM (JACM), v.51 n.1, p.2-45, January 2004 [doi>10.1145/962446.962448]
• 19: Makoto Murata , Akihiko Tozawa , Michiharu Kudo , Satoshi Hada, XML access control using static analysis, Proceedings of the 10th ACM conference on Computer and communications security, October 27-30, 2003, Washington D.C., USA [doi>10.1145/948109.948122]
• 20: Frank Neven , Thomas Schwentick, XPath Containment in the Presence of Disjunction, DTDs, and Variables, Proceedings of the 9th International Conference on Database Theory, p.315-329, January 08-10, 2003
• 21: Randel J. Peters , M. Tamer Özsu, An axiomatic model of dynamic schema evolution in objectbase systems, ACM Transactions on Database Systems (TODS), v.22 n.1, p.75-114, March 1997 [doi>10.1145/244810.244813]
• 22: Arsany Sawires , Junichi Tatemura , Oliver Po , Divyakant Agrawal , K. SelÇuk Candan, Incremental maintenance of path-expression views, Proceedings of the 2005 ACM SIGMOD international conference on Management of data, June 14-16, 2005, Baltimore, Maryland [doi>10.1145/1066157.1066208]
• 23: Thomas Schwentick, XPath query containment, ACM SIGMOD Record, v.33 n.1, March 2004 [doi>10.1145/974121.974140]
• 24: Martin Staudt , Matthias Jarke, Incremental Maintenance of Externally Materialized Views, Proceedings of the 22th International Conference on Very Large Data Bases, p.75-86, September 03-06, 1996
• 25: A. Stoica and C. Farkas. Secure xml views. In DBSec, pages 133--146, 2002.
• 26: Y. Velegrakis, R. J. Miller, and L. Popa. Mapping adaptation under evolving schemas. In VLDB, pages 584--595, 2003.
• 27: Y. Wu and H. Jagadish. Structural join order selection for xml query optimization. In ICDE Conf., Bangalore, India, Mar. 2003.
• 28: Wanhong Xu , Z. Meral Özsoyoglu, Rewriting XPath queries using materialized views, Proceedings of the 31st international conference on Very large data bases, August 30-September 02, 2005, Trondheim, Norway
• 29: T. Yu, D. Srivastava, L. Lakshmanan, and H. Jagadish. Compressed accessibility map: Efficient access control for xml. In VLDB Conference, 2002.

INDEX TERMS

Primary Classification:
  H. Information Systems
  H.2 DATABASE MANAGEMENT
      H.2.7 Database Administration

Additional Classification:
  K. Computing Milieux
  K.6 MANAGEMENT OF COMPUTING AND INFORMATION SYSTEMS
      K.6.5 Security and Protection (D.4.6, K.4.2)

General Terms:
Security

Keywords:
XML access control, XPath view, view adaptation