Skip to main navigation Skip to search Skip to main content

A formal language for specifying complex XML authorisations with temporal constraints

  • Western Sydney University

Research output: Chapter in Book / Conference PaperConference Paperpeer-review

2 Citations (Scopus)

Abstract

The Extensible Markup Language (XML) is utilised in many Internet applications we are using today. However, as with many computing technologies, vulnerabilities exist in XML that can allow for malicious and unauthorised use. Applications that utilise XML are therefore susceptible to security faults if they do not provide their own methods. Our research focuses on developing a formal language which can provide access control to information stored in XML formatted documents. This formal language will have the capacity to reason if access to an XML document should be allowed. Our language, Axml(T), allows for the specification of authorisations on XML documents based on the popular Role-based Access Control model. Temporal interval reasoning is the study of logically representing time intervals and relationships between them. As part of our research, we have also included this aspect in our language Axml(T) because we believe it will allow us to specify even more powerful access control authorisations.

Original languageEnglish
Title of host publicationInformation Security and Cryptology - 5th International Conference, Inscrypt 2009, Revised Selected Papers
Pages443-457
Number of pages15
DOIs
Publication statusPublished - 2010
Event5th International Conference on Information Security and Cryptology, Inscrypt 2009 - Beijing, China
Duration: 12 Dec 200915 Dec 2009

Publication series

NameLecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)
Volume6151 LNCS
ISSN (Print)0302-9743
ISSN (Electronic)1611-3349

Conference

Conference5th International Conference on Information Security and Cryptology, Inscrypt 2009
Country/TerritoryChina
CityBeijing
Period12/12/0915/12/09

Keywords

  • access control
  • AI in computer security
  • AI in database
  • authorisations
  • knowledge representation and reasoning
  • logic programming
  • XML databases and security

Fingerprint

Dive into the research topics of 'A formal language for specifying complex XML authorisations with temporal constraints'. Together they form a unique fingerprint.

Cite this