Query-based database policy assurance using semantic web technologies

In this thesis, we present a novel approach to database security which looks at queries instead of the database tables themselves. In doing so, we use a number of Semantic Web technologies to define rules, translate queries, and make assertions about compliance with existing policies. We can ascertain compliance without looking at the contents of the database. Our system can function as a drop-in addition to an existing database system, adding additional functionality in a robust manner. The policies are written in the AIR language, and the reasoners and wrapper scripts in C++ and Python. We discuss the design and implementation of this system in detail.

Department dc:contributor.department

Massachusetts Institute of Technology. Dept. of Electrical Engineering and Computer Science.

Grantor dc:publisher

Massachusetts Institute of Technology

Year dc:date.issued

2009

Author dc:creator

• Soltren, José Hiram

Advisor dc:contributor.advisor

• Lalana Kagal.

• Electrical Engineering and Computer Science.

Statement dc:rights

• M.I.T. theses are protected by copyright. They may be viewed from this source for any purpose, but reproduction or distribution in any format is prohibited without written permission. See provided URL for inquiries about permission.

Licence dc:rights.uri

• http://dspace.mit.edu/handle/1721.1/7582

Language dc:language.iso

eng

Handle dc:identifier.uri

http://hdl.handle.net/1721.1/60819

OAI identifier oai:identifier

oai:dspace.mit.edu:1721.1/60819