The week's pick
Reseach Article
Purpose-based Access Control Exploits by HDB
| International Journal of Computer Applications |
| Foundation of Computer Science (FCS), NY, USA |
| Volume 1 - Number 6 |
| Year of Publication: 2010 |
| Authors: Rajneeshkaur K. Bedi, Anita M. Thengade |
10.5120/137-255
|
Rajneeshkaur K. Bedi, Anita M. Thengade . Purpose-based Access Control Exploits by HDB. International Journal of Computer Applications. 1, 6 ( February 2010), 87-91. DOI=10.5120/137-255
Abstract
As organizations increase their reliance on, as a result preserving privacy has become a crucial requirement for operating a business that manages personal data. Private Schools, district schools, and state education agencies maintain a large volume of personnel files. Due to voluminous stores of personal data being held by Education Industry today, preserving privacy has become a crucial requirement for operating a business. Hippocratic databases have been proposed to answer this requirement through a database design that includes responsibility for the privacy of data as a founding tenet. We identify, study, and implement privacy- preserving feature for education industry in Hippocratic databases. This paper includes the support of how current relational database management systems can be transformed into their privacy preserving equivalents.
References
- R. Agrawal, J. Kiernan, R. Srikant, and Y. Xu. "Hippocratic databases". VLDB 2002.
- K. LeFevre, R. Agrawal, V. Ercegovac, R. Ramakrishnan and Y. Xu. "Limiting disclosure in Hippocratic databases". VLDB 2004.
- R. Agrawal, R. Bayardo, C. Faloutsos, J. Kiernan, R. Rantzau, and R. Srikant. "Auditing compliance with a Hippocratic database". VLDB 2004.
- R. Agrawal, P. Bird, T. Grandison, J. Kiernan, S. Logan, W. Rjaib. "Extending Relational Database Systems to Automatically Enforce Privacy Policies". Industrial paper. ICDE 2005
- T. Kyte. Fine-grained access control. Technical report, Oracle Corporation, 1999.
- Yasin Laura-Silva, Walid Aref "Realizing Privacy-Preserving Features in Hippocratic Databases"
- George Yee and Larry Korba "Privacy Policy Compliance for Web Services"
- R. Agrawal , Christopher Johnson,T. Grandison, J. Kiernan "Enabling the 21st Century HEALTH CARE INFORMATION TECHNOLOGY REVOLUTION" COMMUNICATIONS OF THE ACM February 2007/Vol. 50, No. 2
- European Union, "Directive 95/46/EC of the European Parliament and of the Council of 24 October 1995 on the protection of individuals with regard to the processing of personal data and on the free movement of such data".
- Canadian Standards Association, "Model Code for the Protection of Personal Information",
- Min-A Jeong', Jung-Ja Kim', and Yonggwan Won2 "A Flexible Database Security System using Multiple Access Control Policies"
- Julia B. Earp, Fay C. Payton "Data Protection in the University Setting: Employee Perceptions of Student Privacy"
- Industry Canada, "Privacy and the Information Highway, Regulatory Options for Canada", chapter 6, from: http://strategis.ic.gc.ca/SSG/ca00257e.html#6
- PRAVEEN DALAL "Data Protection law in India : The Trips Analysis"
Index Terms
Keywords