Journal of KIISE:Databases (한국정보과학회논문지:데이타베이스)

Korean Institute of Information Scientists and Engineers (한국정보과학회)
권호 표지

Efficient Authorization Conflict Detection Using Prime Number Graph Labeling in RDF Access Control

RDF 접근 제어에서 소수 그래프 레이블링을 사용한 효율적 권한 충돌 발견

  • 김재훈 (서강대학교 컴퓨터학과) ;
  • 박석 (서강대학교 컴퓨터학과)
  • Published : 2008.04.15
Download PDF
⟨ Previous Next ⟩

Abstract

RDF and OWL are the primary base technologies for implementing Semantic Web. Recently, many researches related with them, or applying them into the other application domains, have been introduced. However, relatively little work has been done for securing the RDF and OWL data. In this article, we briefly introduce an RDF triple based model for specifying RDF access authorization related with RDF security. Next, to efficiently find the authorization conflict by RDF inference, we introduce a method using prime number graph labeling in detail. The problem of authorization conflict by RDF inference is that although the lower concept is permitted to be accessed, it can be inaccessible due to the disapproval for the upper concept. Because by the RDF inference, the lower concept can be interpreted into the upper concept. Some experimental results show that the proposed method using the prime number graph labeling has better performance than the existing simple method for the detection of the authorization conflict.

RDF와 OWL은 시맨틱 웹을 위한 두 가지 핵심 기반 기술이다. 이러한 RDF와 OWL을 이용하는, 또한 이에 관련된 많은 연구들이 최근 소개되었다. 하지만, RDF와 OWL에 대한 정보 보안 관련 연구는 미비한 실정이다. 본 논문에서는 RDF 보안 기술과 관련하여, RDF 트리플에 기반을 둔 안전한 접근제어 명세 모델을 간단히 소개한다. 다음으로 RDF 접근 제어 명세 시의 추론에 의한 권한 충돌을 효율적으로 발견하기 위하여 소수 그래프 레이블링을 기법을 활용하는 방법을 자세히 소개한다. 추론에 의한 접근 권한 충돌 문제는 비록 하위 개념에 대한 접근 권한이 허용이지만, 하위 개념은 상위 개념으로 추론될 수 있으므로, 만약 상위 개념에 대한 접근 권한이 불허로 되어 있는 경우 하위 개념 또한 허용되어서는 안 되는 문제이다. 몇 가지 실험에서는 제안하는 소수 그래프 레이블링을 사용하는 방법이 기존의 단순한 권한 충돌 발견 방법보다 현저히 나은 성능을 가짐을 보여 준다.

Keywords

References

  1. Semantic Web, W3C, http://www.w3.org/2001/sw
  2. RDF Primer, W3C Recommendation, http://www.w3.org/ TR/rdf-primer/
  3. OWL Web Ontology Language Overview, W3C Recommendation, http://www.w3.org/TR/owl-features/
  4. A. Jain, C. Farkas, "Secure resource description framework: an access control model," Proc. of 11th ACM Symposium on Access Control Models and Technologies, pp. 121-129, June 2006
  5. L. Qin, V. Atluri, "Concept-level Access Control for the Semantic Web," Proc. of ACM Workshop on XML Security 2003, pp. 94-103, Oct. 2003
  6. S. Javanmardi, M. Amini, R. Jalili, "An Access Control Model for Protecting Semantic Web Resources," Proc. of the 2nd International Semantic Web Policy Workshop(SWPW'06), Nov. 2006
  7. S. Kaushik, D. Wijesekera, P. Ammann, "Policy- based dissemination of partial web-ontologies," Proc. of the 2005 workshop on Secure web services, pp. 43-52, Nov. 2005
  8. P. Reddivari, T. Finin, A. Joshi, "Policy-Based Access Control for an RDF Store," Proc. of the Policy Management for the Web Workshop, pp. 78-83, May. 2005
  9. G. Wu, K. Zhang, C. Liu, J. Li, "Adapting Prime Number Labeling Scheme for Directed Acyclic Graphs," DASFAA 2006, pp. 787-796, April 2006
  10. E. Damiani, S. D. C. Vimercati, S. Paraboschi, P. Samarati, "A fine-grained access control system for XML documents," ACM Transactions on Information and System Security, 5(2), pp. 169-202, 2002 https://doi.org/10.1145/505586.505590
  11. E. Bertino, S. Castano, E. Ferrari, M. Mesiti, "Specifying and enforcing access control policies for XML document sources," World Wide Web Journal, 3(3), pp. 139-151, 2000 https://doi.org/10.1023/A:1019289831564
  12. E. Bertino, E. Ferrari, "Secure and selective dissemination of XML documents," ACM Transactions on Information and System Security, 5(3), pp. 290-331, 2002 https://doi.org/10.1145/545186.545190
  13. V. Christophides, G. Karvounarakis, D. Plexousakis, M. Scholl, S. Tourtounis, "Optimizing taxonomic semantic web queries using labeling schemes," Journal of Web Semantics, 11(1), pp. 207-228, Nov. 2003
  14. R. Agrawal, A. Borgida, and H. V. Jagadish, "Efficient management of transitive relationships in large data and knowledge bases," In Proc. of the SIGMOD Inter. Conf. on Management of Data, pp. 253-262, 1989
  15. Q. Li and B. Moon, "Indexing and querying XML data for regular path expressions," In Proc. of 27th Inter. Conf. on Very Large Data Bases(VLDB'02), pp. 361-370, 2001
  16. Online Computer Library Center. Dewey decimal classification. http://www.oclc.org/dewey
  17. RDF Semantics, W3C Recommendation, http://www. w3.org/TR/rdf-mt/