{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,9,28]],"date-time":"2025-09-28T20:47:19Z","timestamp":1759092439295,"version":"3.37.3"},"reference-count":50,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"1","license":[{"start":{"date-parts":[[2021,1,1]],"date-time":"2021-01-01T00:00:00Z","timestamp":1609459200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"}],"funder":[{"name":"Research Fund KU Leuven"},{"name":"EU FP7","award":["NESSoS"],"award-info":[{"award-number":["NESSoS"]}]},{"DOI":"10.13039\/501100000780","name":"European Commission","doi-asserted-by":"publisher","id":[{"id":"10.13039\/501100000780","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Dependable and Secure Comput."],"published-print":{"date-parts":[[2021,1,1]]},"DOI":"10.1109\/tdsc.2018.2889309","type":"journal-article","created":{"date-parts":[[2018,12,24]],"date-time":"2018-12-24T19:28:05Z","timestamp":1545679685000},"page":"325-339","source":"Crossref","is-referenced-by-count":8,"title":["SEQUOIA: A Middleware Supporting Policy-Based Access Control for Search and Aggregation in Data-Driven Applications"],"prefix":"10.1109","volume":"18","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-7750-9639","authenticated-orcid":false,"given":"Jasper","family":"Bogaerts","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Bert","family":"Lagaisse","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Wouter","family":"Joosen","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1016\/j.ijinfomgt.2016.11.005"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1145\/1536414.1536440"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2015.2497680"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1109\/BigDataService.2016.35"},{"year":"0","key":"ref31","article-title":"Data access filter."},{"key":"ref30","first-page":"1","article-title":"Bouncer: Policy-based fine grained access control in large databases","volume":"5","author":"opyrchal","year":"2011","journal-title":"Int J Secur Appl"},{"key":"ref37","article-title":"The SQL++ unifying semi-structured query language, and an expressiveness benchmark of SQL-on-Hadoop, NoSQL and NewSQL databases","author":"ong","year":"2014","journal-title":"CoRR abs\/1405 3631"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1145\/1063979.1063998"},{"article-title":"MongoDB document store","year":"2017","author":"mongodb","key":"ref35"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1109\/ICDE.2017.123"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1145\/1943513.1943528"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1109\/ICDE.2016.7498240"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1145\/2818000.2818041"},{"key":"ref2","first-page":"1","article-title":"On the importance of the separation-of-concerns principle in secure software engineering","author":"de win","year":"2002","journal-title":"Proc Appl Eng Principles Syst Secur Des"},{"year":"0","key":"ref1","article-title":"Top 10 most critical web application security risks, release candidate 1."},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1145\/1007568.1007631"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1109\/ICWS.2007.176"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1145\/1805974.1805984"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1145\/800182.810400"},{"key":"ref23","article-title":"Implementing reflective access control in SQL","author":"olson","year":"2009","journal-title":"Data and Application Security"},{"year":"0","key":"ref26"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2016.36"},{"year":"2016","key":"ref50"},{"journal-title":"Information Technology-Database Languages–SQL–Part 2 Foundation (SQL\/Foundation)","year":"2011","key":"ref10"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1007\/s00450-016-0334-3"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-23556-6_4"},{"year":"2017","key":"ref12","article-title":"Redis"},{"year":"2017","key":"ref13","article-title":"Elasticsearch"},{"year":"2017","key":"ref14","article-title":"Cassandra wide-column store"},{"year":"0","key":"ref15","article-title":"JPA."},{"year":"2017","key":"ref16","article-title":"Kundera"},{"year":"2016","key":"ref17","article-title":"Simple Tree-structured Attribute-based Policy Language (STAPL)"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2005.9"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1109\/ICACCI.2015.7275699"},{"key":"ref4","article-title":"Guide to attribute based access control (ABAC) definition and considerations","volume":"800","author":"hu","year":"2013","journal-title":"NIST Special Publication"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1007\/3-540-45608-2_3"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1145\/1266840.1266846"},{"year":"2013","key":"ref5","article-title":"eXtensible access control markup language (XACML) standard, version 3.0"},{"key":"ref8","first-page":"1","author":"bogaerts","year":"2017","journal-title":"SEQUOIA Scalable Policy-Based Access Control for Search Operations in Data-Driven Applications"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1145\/1456492.1456499"},{"article-title":"Transforming XACML policies into database search queries","year":"2017","author":"bogaerts","key":"ref49"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1145\/2695664.2695708"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1109\/SECPRI.1989.36295"},{"year":"2017","key":"ref45"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-45215-7_2"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-662-46666-7_7"},{"article-title":"The e-document case study: Functional analysis and access control requirements","year":"2014","author":"decat","key":"ref42"},{"article-title":"Fine-grained relational database access-control policy enforcement using reverse queries","year":"2015","author":"rissanen","key":"ref41"},{"year":"2017","key":"ref44"},{"article-title":"The workforce management case study: functional analysis and access control requirements","year":"2014","author":"decat","key":"ref43"}],"container-title":["IEEE Transactions on Dependable and Secure Computing"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/8858\/9316344\/08587198.pdf?arnumber=8587198","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,1,12]],"date-time":"2022-01-12T16:16:45Z","timestamp":1642004205000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/8587198\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2021,1,1]]},"references-count":50,"journal-issue":{"issue":"1"},"URL":"https:\/\/doi.org\/10.1109\/tdsc.2018.2889309","relation":{},"ISSN":["1545-5971","1941-0018","2160-9209"],"issn-type":[{"type":"print","value":"1545-5971"},{"type":"electronic","value":"1941-0018"},{"type":"electronic","value":"2160-9209"}],"subject":[],"published":{"date-parts":[[2021,1,1]]}}}