|
Title:
|
A MODEL FOR FINE-GRAINED ACCESS CONTROL TO WEB DATABASES: VAMOS A CASE STUDY |
|
Author(s):
|
Peter Trommler |
|
ISBN:
|
978-972-8939-73-1 |
|
Editors:
|
Miguel Baptista Nunes, Guo Chao Peng, Jörg Roth, Hans Weghorn and Pedro Isaías |
|
Year:
|
2012 |
|
Edition:
|
Single |
|
Keywords:
|
Web security, access control, databases, parameterized views, case study, ambient assisted living |
|
Type:
|
Full Paper |
|
First Page:
|
27 |
|
Last Page:
|
34 |
|
Language:
|
English |
|
Cover:
|
|
|
Full Contents:
|
click to dowload 
|
|
Paper Abstract:
|
Flaws in a Web applications access control code could expose core business data stored in databases to the Internet. In this paper we present VAMOS, an ambient assisted living project for seniors, as a case study to verify the validity of an access control model that is based on the notion of the users own data. The implementation is based on the concept of parameterized views in a database. The paper develops the own data model based on navigation through associations and temporal aspects representing actions in the past. A textual representation of the abstract model is presented and examples taken from VAMOS are displayed and discussed. |
|
|
|
|
|
|
