Caires, Luis and Pérez, Jorge A. and Seco, João C. and Torres Vieira, Hugo and Ferrão, Lúcio Type-based access control in data-centric systems. In: Programming Languages and Systems. Lecture Notes in Computer Science (6602). Springer, pp. 136-155. ISBN 978-3-642-19718-5 (2011)
This is the latest version of this item.
|
PDF (Pre-print version)
Download (533kB) | Preview |
Abstract
Data-centric multi-user systems, such as web applications, require flexible yet fine-grained data security mechanisms. Such mechanisms are usually enforced by a specially crafted security layer, which adds extra complexity and often leads to error prone coding, easily causing severe security breaches. In this paper, we introduce a programming language approach for enforcing access control policies to data in data-centric programs by static typing. Our development is based on the general concept of refinement type, but extended so as to address realistic and challenging scenarios of permission-based data security, in which policies dynamically depend on the database state, and flexible combinations of column- and row-level protection of data are necessary. We state and prove soundness and safety of our type system, stating that well-typed programs never break the declared data access control policies.
| Item Type: | Book Section |
|---|---|
| Identification Number: | https://doi.org/10.1007/978-3-642-19718-5_8 |
| Additional Information: | Proceedings of the 20th European Symposium on Programming, ESOP 2011, Held as Part of the Joint European Conferences on Theory and Practice of Software, ETAPS 2011, Saarbrücken, Germany, March 26–April 3, 2011 |
| Subjects: | Q Science > QA Mathematics > QA75 Electronic computers. Computer science |
| Research Area: | Computer Science and Applications |
| Depositing User: | Hugo Vieria |
| Date Deposited: | 25 Jun 2015 12:52 |
| Last Modified: | 25 Jun 2015 12:52 |
| URI: | http://eprints.imtlucca.it/id/eprint/2719 |
Available Versions of this Item
- Type-based access control in data-centric systems. (deposited 25 Jun 2015 12:52) [Currently Displayed]
Actions (login required)
 |
Edit Item |
