出版社:International Association for Computer Information Systems
摘要:Using XML in environments with multiple levels of security presents a number of challenges. From a confidentiality standpoint, users must be prevented from accessing data elements above their clearance, while at the same time be prevented from leaking data to lower levels through write operations. This work employs a security tagging approach to ensure each element in a document is appropriately labeled for a mandatory access co ntrol environment. Operations include not only read, but insert, update and delete, all with sensitivity to potentially polyinstantiated or dominating elements