{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2023,1,9]],"date-time":"2023-01-09T20:10:50Z","timestamp":1673295050010},"reference-count":54,"publisher":"Springer Science and Business Media LLC","issue":"3","license":[{"start":{"date-parts":[[2010,9,11]],"date-time":"2010-09-11T00:00:00Z","timestamp":1284163200000},"content-version":"tdm","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["The VLDB Journal"],"published-print":{"date-parts":[[2011,6]]},"DOI":"10.1007\/s00778-010-0202-x","type":"journal-article","created":{"date-parts":[[2010,9,10]],"date-time":"2010-09-10T02:42:27Z","timestamp":1284086547000},"page":"397-415","source":"Crossref","is-referenced-by-count":8,"title":["QFilter: rewriting insecure XML queries to secure ones using non-deterministic finite automata"],"prefix":"10.1007","volume":"20","author":[{"given":"Bo","family":"Luo","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Dongwon","family":"Lee","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Wang-Chien","family":"Lee","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Peng","family":"Liu","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2010,9,11]]},"reference":[{"key":"202_CR1","doi-asserted-by":"crossref","unstructured":"Ayyagari, P., Mitra, P., Lee, D., Liu, P., Lee, W.C.: Incremental adaptation of xpath access control views. In: ASIACCS \u201907: Proceedings of the 2nd ACM Symposium on Information, Computer and Communications Security, pp. 105\u2013116 (2007)","DOI":"10.1145\/1229285.1229303"},{"key":"202_CR2","unstructured":"Berglund, A., Boag, S., Chamberlin, D., Fern\u00e1ndez, M.F., Kay, M., Robie, J., Sim\u00e9on, J.: XML Path Language (XPath) 2.0. W3C Working Draft (2003). http:\/\/www.w3.org\/TR\/xpath20"},{"issue":"3","key":"202_CR3","doi-asserted-by":"crossref","first-page":"21","DOI":"10.1109\/4236.935172","volume":"5","author":"E. Bertino","year":"2001","unstructured":"Bertino E., Castano S., Ferrari E.: Securing xml documents with author-x. IEEE Int. Comput. 5(3), 21\u201331 (2001)","journal-title":"IEEE Int. Comput."},{"issue":"3","key":"202_CR4","doi-asserted-by":"crossref","first-page":"290","DOI":"10.1145\/545186.545190","volume":"5","author":"E. Bertino","year":"2002","unstructured":"Bertino E., Ferrari E.: Secure and selective dissemination of XML documents. ACM Trans. Inf. Syst. Secur. (TISSEC) 5(3), 290\u2013331 (2002)","journal-title":"ACM Trans. Inf. Syst. Secur. (TISSEC)"},{"key":"202_CR5","unstructured":"Boag, S., Chamberlin, D., Fern\u00e1ndez, M.F., Florescu, D., Robie, J., Simeon, J.: XQuery 1.0: An XML Query Language. W3C Working Draft (2003). http:\/\/www.w3.org\/TR\/xquery"},{"key":"202_CR6","doi-asserted-by":"crossref","unstructured":"Bouganim, L., Ngoc, F.D., Pucheral, P.: Client-based access control management for XML documents. In: VLDB. Toronto, Canada (2004)","DOI":"10.1016\/B978-012088469-8.50011-5"},{"key":"202_CR7","doi-asserted-by":"crossref","unstructured":"Bravo, L., Cheney, J., Fundulaki, I.: Accon: checking consistency of xml write-access control policies. In: Proceedings of the 11th International Conference on Extending Database Technology, pp. 715\u2013719 (2008)","DOI":"10.1145\/1352431.1352521"},{"key":"202_CR8","unstructured":"Bray, T., Paoli, J., Sperberg-McQueen, C. M., Maler, E., Yergeau, F.: Extensible Markup Language (XML) 1.0, 5th edn. (2008)"},{"key":"202_CR9","doi-asserted-by":"crossref","unstructured":"Cho, S., Amer-Yahia, S., Lakshmanan, L.V., Srivastava, D.: Optimizing the secure evaluation of Twig queries. In: VLDB. Hong Kong, China (2002)","DOI":"10.1016\/B978-155860869-6\/50050-0"},{"key":"202_CR10","unstructured":"Choi, B.: What are real dtds like? In: WebDB (2002)"},{"key":"202_CR11","doi-asserted-by":"crossref","unstructured":"Cuppens, F., Cuppens-Boulahia, N., Sans, T.: Protection of relationships in xml documents with the xml-bb model. In: First International Conference on Information Systems Security (ICISS), pp. 148\u2013163 (2005)","DOI":"10.1007\/11593980_11"},{"issue":"2","key":"202_CR12","doi-asserted-by":"crossref","first-page":"169","DOI":"10.1145\/505586.505590","volume":"5","author":"E. Damiani","year":"2002","unstructured":"Damiani E., De Capitani di Vimercati S., Paraboschi S., Samarati P.: A fine-grained access control system for XML documents. ACM Trans. Inf. Syst. Secur. (TISSEC) 5(2), 169\u2013202 (2002)","journal-title":"ACM Trans. Inf. Syst. Secur. (TISSEC)"},{"key":"202_CR13","doi-asserted-by":"crossref","unstructured":"Damiani, E., Fansi, M., Gabillon, A., Marrara, S.: Securely updating xml. In: Knowledge-Based Intelligent Information and Engineering Systems, 11th International Conference (KES), pp. 1098\u20131106 (2007)","DOI":"10.1007\/978-3-540-74829-8_134"},{"issue":"6","key":"202_CR14","doi-asserted-by":"crossref","first-page":"379","DOI":"10.1016\/j.csi.2008.03.006","volume":"30","author":"E. Damiani","year":"2008","unstructured":"Damiani E., Fansi M., Gabillon A., Marrara S.: A general approach to securely querying xml. Comput. Stand. Interfaces 30(6), 379\u2013389 (2008)","journal-title":"Comput. Stand. Interfaces"},{"key":"202_CR15","doi-asserted-by":"crossref","unstructured":"Damiani, E., di Vimercati, S.D.C., Paraboschi, S., Samarati, P.: Securing xml documents. In: 7th International Conference on Extending Database Technology, pp. 121\u2013135 (2000)","DOI":"10.1007\/3-540-46439-5_8"},{"issue":"6","key":"202_CR16","doi-asserted-by":"crossref","first-page":"59","DOI":"10.1016\/S1389-1286(00)00053-0","volume":"33","author":"E. Damiani","year":"2000","unstructured":"Damiani E., Vimercati S.D.C.D., Paraboschi S., Samarati P.: Design and implementation of an access control processor for XML documents. Comput. Netw. 33(6), 59\u201375 (2000)","journal-title":"Comput. Netw."},{"key":"202_CR17","unstructured":"Diao, Y., Franklin, M.J.: High-performance XML filtering: an overview of YFilter. IEEE Data Eng. Bulletin (2003)"},{"key":"202_CR18","unstructured":"Fan, W., Chan, C.Y., Garofalakis, M.: Secure xml querying with security views. In: SIGMOD \u201904: Proceedings of the 2004 ACM SIGMOD International Conference on Management of Data, pp. 587\u2013598. ACM Press, New York, (2004). http:\/\/doi.acm.org\/10.1145\/1007568.1007634"},{"issue":"2","key":"202_CR19","doi-asserted-by":"crossref","first-page":"275","DOI":"10.1109\/69.277771","volume":"6","author":"E. Fernandez","year":"1994","unstructured":"Fernandez E., Gudes E., Song H.: A model of evaluation and administration of security in object-oriented databases. IEEE Trans. Knowl. Data Eng. (TKDE) 6(2), 275\u2013292 (1994)","journal-title":"IEEE Trans. Knowl. Data Eng. (TKDE)"},{"key":"202_CR20","doi-asserted-by":"crossref","unstructured":"Finance, B., Medjdoub, S., Pucheral, P.: The case for access control on xml relationships. In: 14th ACM International Conference on Information and Knowledge Management, pp. 107\u2013114 (2005)","DOI":"10.1145\/1099554.1099576"},{"key":"202_CR21","doi-asserted-by":"crossref","unstructured":"Fundulaki, I., Maneth, S.: Formalizing xml access control for update operations. In: 12th ACM Symposium on Access Control Models and Technologies, pp. 169\u2013174 (2007)","DOI":"10.1145\/1266840.1266868"},{"key":"202_CR22","doi-asserted-by":"crossref","unstructured":"Fundulaki, I., Marx, M.: Specifying access control policies for xml documents with xpath. In: Ninth ACM Symposium on Access Control Models and Technologies, pp. 61\u201369 (2004)","DOI":"10.1145\/990036.990046"},{"key":"202_CR23","doi-asserted-by":"crossref","unstructured":"Gabillon, A.: An authorization model for xml databases. In: 2004 Workshop on Secure Web Service, pp. 16\u201328 (2004)","DOI":"10.1145\/1111348.1111351"},{"key":"202_CR24","doi-asserted-by":"crossref","unstructured":"Gabillon, A., Bruno, E.: Regulating access to xml documents. In: Das\u201901: Proceedings of the Fifteenth Annual Working Conference on Database and Application Security, pp. 299\u2013314. Kluwer Academic Publishers, Norwell (2002)","DOI":"10.1007\/978-0-387-35587-0_21"},{"key":"202_CR25","unstructured":"Godik, S., Moses, T. (Eds): eXtensible Access Control Markup Language (XACML) Version 1.0. OASIS Specification Set (2003). http:\/\/www.oasis-open.org\/committees\/xacml\/repository\/"},{"key":"202_CR26","volume-title":"Introduction to Automata Theory, Languages, and Computation","author":"J.E. Hopcroft","year":"2007","unstructured":"Hopcroft J.E., Motwani R., Ullman J.D.: Introduction to Automata Theory, Languages, and Computation. Addison-Wesley, Reading (2007)"},{"issue":"7","key":"202_CR27","doi-asserted-by":"crossref","first-page":"939","DOI":"10.1109\/TKDE.2005.111","volume":"17","author":"M. Jiang","year":"2005","unstructured":"Jiang M., Fu A.W.C.: Integration and efficient lookup of compressed xml accessibility maps. IEEE Trans. Knowl. Data Eng. 17(7), 939\u2013953 (2005)","journal-title":"IEEE Trans. Knowl. Data Eng."},{"key":"202_CR28","doi-asserted-by":"crossref","unstructured":"Kudo, M., Hada, S.: XML document security based on provisional authorization. In: ACM Conference on Computer and Communications Security (CCS) (2000)","DOI":"10.1145\/352600.352613"},{"key":"202_CR29","doi-asserted-by":"crossref","unstructured":"Kuper, G., Massacci, F., Rassadko, N.: Generalized xml security views. In: the Tenth ACM Symposium on Access Control Models and Technologies, pp. 77\u201384 (2005)","DOI":"10.1145\/1063979.1063994"},{"issue":"3","key":"202_CR30","doi-asserted-by":"crossref","first-page":"173","DOI":"10.1007\/s10207-008-0074-x","volume":"8","author":"G. Kuper","year":"2009","unstructured":"Kuper G., Massacci F., Rassadko N.: Generalized xml security views. Int. J. Inf. Secur. 8(3), 173\u2013203 (2009)","journal-title":"Int. J. Inf. Secur."},{"key":"202_CR31","doi-asserted-by":"crossref","unstructured":"Lee, D., Lee, W.C., Liu, P.: Supporting XML security models using relational databases: a vision. In: XML Database Symposium (XSym). Berlin, Germany (2003)","DOI":"10.1007\/978-3-540-39429-7_18"},{"issue":"3","key":"202_CR32","doi-asserted-by":"crossref","first-page":"371","DOI":"10.1007\/s00778-006-0037-7","volume":"16","author":"J.G. Lee","year":"2007","unstructured":"Lee J.G., Whang K.Y., Han W.S., Song I.Y.: The dynamic predicate: integrating access control with query processing in xml databases. VLDB J. 16(3), 371\u2013387 (2007)","journal-title":"VLDB J."},{"key":"202_CR33","unstructured":"Li, F., Luo, B., Liu, P., Lee, D., Mitra, P., Lee, W.C., Chu, C.H.: In-broker access control: towards efficient end-to-end performance of information brokerage systems. In: IEEE International Conference on Sensor Networks, Ubiquitous, and Trustworthy Computing, pp. 252\u2013259 (2006)"},{"key":"202_CR34","doi-asserted-by":"crossref","unstructured":"Luo, B., Lee, D., Liu, P.: Pragmatic XML access control using off-the-shelf RDBMS. In: 12th European Symposium On Research in Computer Security (ESORICS). Dresden, Germany (2007)","DOI":"10.1007\/978-3-540-74835-9_5"},{"key":"202_CR35","doi-asserted-by":"crossref","unstructured":"Luo, B., Lee, D., Lee, W.C., Liu, P.: QFilter: fine-grained run-time XML access control via NFA-based query rewriting. In: ACM CIKM. Washington (2004)","DOI":"10.1145\/1031171.1031273"},{"key":"202_CR36","unstructured":"Luo, B., Lee, D., Lee, W.C., Liu, P.: Deep set operators for XQuery. In: Second International Workshop on XQuery Implementation, Experience and Perspectives (XIME-P). Baltimore (2005)"},{"key":"202_CR37","doi-asserted-by":"crossref","first-page":"1045","DOI":"10.1002\/j.1538-7305.1955.tb03788.x","volume":"34","author":"G.H. Mealy","year":"1955","unstructured":"Mealy G.H.: A method for synthesizing sequential circuits. Bell Syst. Tech. J. 34, 1045\u20131079 (1955)","journal-title":"Bell Syst. Tech. J."},{"issue":"4","key":"202_CR38","doi-asserted-by":"crossref","first-page":"421","DOI":"10.1145\/1187441.1187443","volume":"9","author":"G. Mella","year":"2006","unstructured":"Mella G., Ferrari E., Bertino E., Koglin Y.: Controlled and cooperative updates of xml documents in byzantine and failure-prone distributed systems. ACM Trans. Inf. Syst. Secur. 9(4), 421\u2013460 (2006)","journal-title":"ACM Trans. Inf. Syst. Secur."},{"key":"202_CR39","doi-asserted-by":"crossref","unstructured":"Mohan, S., Klinginsmith, J., Sengupta, A., Wu, Y.: Acxess\u2014access control for xml with enhanced security specifications. In: 22nd International Conference on Data Engineering, p. 171 (2006)","DOI":"10.1109\/ICDE.2006.12"},{"key":"202_CR40","doi-asserted-by":"crossref","unstructured":"Mohan, S., Sengupta, A., Wu, Y.: Access control for xml: a dynamic query rewriting approach. In: 14th ACM International Conference on Information and Knowledge Management, pp. 251\u2013252 (2005)","DOI":"10.1145\/1099554.1099612"},{"key":"202_CR41","doi-asserted-by":"crossref","unstructured":"Murata, M., Tozawa, A., Kudo, M.: XML access control using static analysis. In: ACM Conference on Computer and Communications Security (CCS). Washington (2003)","DOI":"10.1145\/948109.948122"},{"issue":"3","key":"202_CR42","doi-asserted-by":"crossref","first-page":"292","DOI":"10.1145\/1178618.1178621","volume":"9","author":"M. Murata","year":"2006","unstructured":"Murata M., Tozawa A., Kudo M., Hada S.: Xml access control using static analysis. ACM Trans. Inf. Syst. Secur. 9(3), 292\u2013324 (2006)","journal-title":"ACM Trans. Inf. Syst. Secur."},{"key":"202_CR43","doi-asserted-by":"crossref","unstructured":"Qi, N., Kudo, M.: Access-condition-table-driven access control for xml databases. In: Samarati, P., Ryan, P.Y.A., Gollmann, D., Molva, R. (eds.) ESORICS, Lecture Notes in Computer Science, vol. 3193, pp. 17\u201332. Springer (2004)","DOI":"10.1007\/978-3-540-30108-0_2"},{"key":"202_CR44","doi-asserted-by":"crossref","unstructured":"Qi, N., Kudo, M.: Xml access control with policy matching tree. In: ESORICS 2005, 10th European Symposium on Research in Computer Security, pp. 3\u201323 (2005)","DOI":"10.1007\/11555827_2"},{"key":"202_CR45","doi-asserted-by":"crossref","unstructured":"Qi, N., Kudo, M., Myllymaki, J., Pirahesh, H.: A function-based access control model for xml databases. In: 14th ACM International Conference on Information and Knowledge Management, pp. 115\u2013122 (2005)","DOI":"10.1145\/1099554.1099577"},{"issue":"1","key":"202_CR46","doi-asserted-by":"crossref","first-page":"89","DOI":"10.1145\/103140.103144","volume":"16","author":"F. Rabitti","year":"1991","unstructured":"Rabitti F., Bertino E., Kim W., Woelk D.: A model of authorization for next-generation database systems. ACM Trans. Database Syst. (TODS) 16(1), 89\u2013131 (1991)","journal-title":"ACM Trans. Database Syst. (TODS)"},{"key":"202_CR47","doi-asserted-by":"crossref","unstructured":"Sandhu, R., Coyne, E., Feinstein, H., Youman, C.: Role-Based Access Control Models. IEEE Comput. 29(2) (1996)","DOI":"10.1109\/2.485845"},{"key":"202_CR48","unstructured":"Schmidt, A.R., Waas, F., Kersten, M.L., Florescu, D., Manolescu, I., Carey, M.J., Busse, R.: The XML Benchmark Project. Tech. Rep. INS-R0103, CWI (2001)"},{"key":"202_CR49","unstructured":"Simeon, J., Fernandez, M.: Galax V 0.3.5 (2004). http:\/\/db.bell-labs.com\/galax\/"},{"key":"202_CR50","doi-asserted-by":"crossref","unstructured":"Stoica, A., Farkas, C.: Secure xml views. In: Gudes, E., Shenoi, S. (eds.) DBSec, IFIP Conference Proceedings, vol. 256, pp. 133\u2013146. Kluwer (2002)","DOI":"10.1007\/978-0-387-35697-6_11"},{"key":"202_CR51","doi-asserted-by":"crossref","unstructured":"De Capitani di Vimercati, S., Marrara, S., Samarati, P.: An access control model for querying xml data. In: Workshop on Secure web services, pp. 36\u201342 (2005)","DOI":"10.1145\/1103022.1103029"},{"key":"202_CR52","unstructured":"Xiao, Y., Luo, B., Lee, D.: Security-conscious XML indexing. In: International Conference on Database Systems for Advanced Applications (DASFAA). Bangkok, Thailand (2007)"},{"key":"202_CR53","doi-asserted-by":"crossref","unstructured":"Yu, T., Srivastava, D., Lakshmanan, L.V., Jagadish, H.V.: Compressed accessibility map: efficient access control for XML. In: VLDB. Hong Kong, China (2002)","DOI":"10.1016\/B978-155860869-6\/50049-4"},{"issue":"2","key":"202_CR54","doi-asserted-by":"crossref","first-page":"326","DOI":"10.1016\/j.datak.2006.03.005","volume":"60","author":"H. Zhang","year":"2007","unstructured":"Zhang H., Zhang N., Salem K., Zhuo D.: Compact access control labeling for efficient secure xml query evaluation. Data Knowl. Eng. 60(2), 326\u2013344 (2007)","journal-title":"Data Knowl. Eng."}],"container-title":["The VLDB Journal"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/s00778-010-0202-x.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/link.springer.com\/article\/10.1007\/s00778-010-0202-x\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/s00778-010-0202-x","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2019,6,4]],"date-time":"2019-06-04T10:14:31Z","timestamp":1559643271000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/s00778-010-0202-x"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2010,9,11]]},"references-count":54,"journal-issue":{"issue":"3","published-print":{"date-parts":[[2011,6]]}},"alternative-id":["202"],"URL":"https:\/\/doi.org\/10.1007\/s00778-010-0202-x","relation":{},"ISSN":["1066-8888","0949-877X"],"issn-type":[{"value":"1066-8888","type":"print"},{"value":"0949-877X","type":"electronic"}],"subject":[],"published":{"date-parts":[[2010,9,11]]}}}