Data and Application Security

Developments and Directions
2001
ISBN: 978-0-7923-7514-2
Verlag: Springer US

Buch, Englisch, Band 73, 378 Seiten, Format (B × H): 160 mm x 241 mm, Gewicht: 1600 g

Reihe: IFIP Advances in Information and Communication Technology

New technology is always evolving and companies must have appropriate security for their businesses to be able to keep up to date with the changes. With the rapid growth of the internet and the world wide web, data and applications security will always be a key topic in industry as well as in the public sector, and has implications for the whole of society.
covers issues related to security and privacy of information in a wide range of applications, including:

• Electronic Commerce, XML and Web Security;
• Workflow Security and Role-based Access Control;
• Distributed Objects and Component Security;
• Inference Problem, Data Mining and Intrusion Detection;
• Language and SQL Security;
• Security Architectures and Frameworks;
• Federated and Distributed Systems Security;
• Encryption, Authentication and Security Policies.

This book contains papers and panel discussions from the Fourteenth Annual Working Conference on Database Security, which is part of the Database Security: Status and Prospects conference series sponsored by the International Federation for Information Processing (IFIP). The conference was held in Schoorl, The Netherlands in August 2000.

Zielgruppe

Research

Autoren/Hrsg.

Thuraisingham, B.

Tari, Zahir

van de Riet, Reind

Dittrich, Klaus R.

Fachgebiete

• Mathematik | Informatik EDV | Informatik Daten / Datenbanken Datenkompression, Dokumentaustauschformate
• Mathematik | Informatik EDV | Informatik Technische Informatik Computersicherheit Kryptographie, Datenverschlüsselung
• Interdisziplinäres Wissenschaften Wissenschaften: Forschung und Information Informationstheorie, Kodierungstheorie
• Mathematik | Informatik EDV | Informatik Informatik Logik, formale Sprachen, Automaten
• Mathematik | Informatik EDV | Informatik Technische Informatik Systemverwaltung & Management
• Mathematik | Informatik EDV | Informatik Daten / Datenbanken Zeichen- und Zahlendarstellungen
• Mathematik | Informatik EDV | Informatik Daten / Datenbanken Informationstheorie, Kodierungstheorie

Inhaltsverzeichnis

Protecting Information when Access is Granted for Collaboration.- Author-?: A Java-Based System For XML Data Protection.- A Fair-Exchange E-Commerce Protocol With Automated Dispute Resolution.- XML Access Control Systems: A Component-Based Approach.- A Configurable Security Architecture Prototype.- Distributed Policies for Data Management — Making Policies Mobile.- Security Architecture of The Multimedia Mediator.- Simulation And Analysis of Cryptographic Protocols.- Authentic Third-Party Data Publication.- Protecting File Systems Against Corruption Using Checksums.- Web Security and Privacy.- Coordinating Policy for Federated Applications.- Integrating Multilevel Security Policies in Multilevel Federated Database Systems.- Wrappers – A Mechanism to Support State-Based Authorization in Web Applications.- An Integrated Framework for Database Privacy Protection.- Discovery of Multi-Level Security Policies.- Protecting Deductive Databases from Unauthorized Retrievals.- Confidentiality vs Integrity in Secure Databases.- Extending SQL’s Grant Operation to Limit Privileges.- Language Extensions for Programmable Security.- Protecting Privacy from Continuous High-Resolution Satellite Surveillance.- Database Security Integration Using Role-Based Access Control.- User Role-Based Security Model for a Distributed Environment.- WorkFlow Analyzed for Security and Privacy in using Databases.- Identifying Security Holes in OLAP Applications.- Algorithms and Experience in Increasing the Intelligibility and Hygiene of Access Control in Large Organizations.- Database Security 2000.- Declarative Semantics of Belief Queries in Mls Deductive Databases.- Trust Management in Distributed Databases.- Active Authorization as High-level Control.- Conference Key Agreement Protocol usingOblivious Transfer.- An Integration Model of Role-Based Access Control and Activity-Based Access Control Using Task.- Authorization Model in Object-Oriented Systems.- Panel 2.- Conference Summary.