Abstract | ||
---|---|---|
Cooperation requires sharing data, but enforcing access restrictions across enterprises is a challenge. Different sites have different policies and use a variety of access control methods that are tailored to the individual enterprises' needs. Mapping one set of rules into another may require complex computations, possibly with a separate method for each pair of sites. This paper proposes an information flow control model for enforcing access restrictions across a virtual enterprise. Labels are assigned to data structures to ensure uniform treatment across the enterprise, and dynamic label checking provides flexibility during operation. A set of rules are presented to facilitate data manipulation so that they do not lead to information leak. The proposed solution particularly suits web-based environments and web services operations. |
Year | DOI | Venue |
---|---|---|
2009 | 10.1007/978-3-642-04568-4_60 | IFIP Advances in Information and Communication Technology |
Keywords | Field | DocType |
Virtual enterprise,access control,information flow control | Information flow (information theory),Data structure,Computer science,Access control,Data manipulation language,Web service,Database,Computation | Conference |
Volume | ISSN | Citations |
307 | 1868-4238 | 1 |
PageRank | References | Authors |
0.37 | 9 | 3 |
Name | Order | Citations | PageRank |
---|---|---|---|
Peter Bertók | 1 | 158 | 35.62 |
Abdelkamel Tari | 2 | 70 | 24.81 |
Saadia Kedjar | 3 | 1 | 0.71 |