Efficient and Flexible Access Control via Logic Program Specialisation
Efficient and Flexible Access Control via Logic Program Specialisation
We describe the use of a flexible meta-interpreter for performing access control checks on deductive databases. The meta-program is implemented in Prolog and takes as input a database and an access policy specification. We then proceed to specialise the meta-program for a given access policy and intensional database by using the Logen partial evaluation system. In addition to describing the programs involved in our approach, we give a number of performance measures for our implementation of an access control checker, and we discuss the implications of using this approach for access control on deductive databases. In particular, we show that by using our approach we get flexible access control with virtually zero overhead.
Database Access Control, Datalog, Partial Deduction, Cogen Approach, Program Transformation
1-58113-835-0
190-199
Association for Computing Machinery
Barker, Steve
00504f81-7e2e-40d9-9a67-c0c9868f6af8
Leuschel, Michael
c2c18572-66cf-4f84-ade4-218ce3afe78b
Varea, Mauricio
7a752b8b-0f8b-47e0-b411-2ac53f228ba7
2004
Barker, Steve
00504f81-7e2e-40d9-9a67-c0c9868f6af8
Leuschel, Michael
c2c18572-66cf-4f84-ade4-218ce3afe78b
Varea, Mauricio
7a752b8b-0f8b-47e0-b411-2ac53f228ba7
Barker, Steve, Leuschel, Michael and Varea, Mauricio
(2004)
Efficient and Flexible Access Control via Logic Program Specialisation.
In Proceedings of the 11th Symposium on Partial Evaluation and Semantics-Based Program Manipulation (PEPM).
Association for Computing Machinery.
.
Record type:
Conference or Workshop Item
(Paper)
Abstract
We describe the use of a flexible meta-interpreter for performing access control checks on deductive databases. The meta-program is implemented in Prolog and takes as input a database and an access policy specification. We then proceed to specialise the meta-program for a given access policy and intensional database by using the Logen partial evaluation system. In addition to describing the programs involved in our approach, we give a number of performance measures for our implementation of an access control checker, and we discuss the implications of using this approach for access control on deductive databases. In particular, we show that by using our approach we get flexible access control with virtually zero overhead.
Text
pe-sigproc.pdf
- Other
More information
Published date: 2004
Keywords:
Database Access Control, Datalog, Partial Deduction, Cogen Approach, Program Transformation
Organisations:
Electronics & Computer Science
Identifiers
Local EPrints ID: 259545
URI: http://eprints.soton.ac.uk/id/eprint/259545
ISBN: 1-58113-835-0
PURE UUID: 78a89f1d-07f8-4080-8597-307eab047eb2
Catalogue record
Date deposited: 27 Jul 2004
Last modified: 14 Mar 2024 06:24
Export record
Contributors
Author:
Steve Barker
Author:
Michael Leuschel
Author:
Mauricio Varea
Download statistics
Downloads from ePrints over the past year. Other digital versions may also be available to download e.g. from the publisher's website.
View more statistics