Qompliance: Declarative Data-Centric Policy Compliance on SQL-based Data Movements

Data compliance is essential for ensuring that organizations do not run afoul of data protection and privacy legislation. Geographically distributed data is an especially relevant topic because of recent developments in cross-border data protection agreements between the United States and the European Union. We introduce Qompliance, a novel...

Dual Access Control for Cloud-Based Data Storage and Sharing

Cloud-based data storage service has drawn increasing interests from both academic and industry in the recent years due to its efficient and low cost management. Since it provides services in an open network, it is urgent for service providers to make use of secure data storage and sharing mechanism to ensure data confidentiality and service...

Designing a privacy aware infrastructure for an Inclusive Enterprise at IBM

The widespread adoption of computer technologies fundamentally re-shaped the way companies operate. A deluge of systems and applications now support the daily activities of employees and managers alike, thus increasing the amount, value, and sensibleness of available data. This abundance of data provides new opportunities for applications...

Glados, a secure access control system

We have created a Secure Access Control System, named Glados. The goal of this system is to limit the access to a building, and separate 'zones' in that building, to authorized persons only. Our primary concerns were security and maintainability. Special care has been taken in identifying possible attack vectors and defending against those. This...

Weaving Web Applications with WebDSL (Demonstration)

This paper is a pre-print of: Danny M. Groenewegen, and Eelco Visser. Weaving Web Applications with WebDSL (Demonstration). In: Gary T. Leavens (editor) Companion to the 24th ACM SIGPLAN Conference on Object-Oriented Programing, Systems, Languages, and Applications (OOPSLA 2009). WebDSL is a domain-specific language for the development of web...

Resources Sharing and Access Control in Group-oriented Networks: Fednet and Related Paradigms

A Personal Network (PN) is a network composed of devices of a person that can communicate with each other independently from their geographical location. Extra functionality in PNs enables the cooperation amongst different persons forming a group-oriented network called a Federation of Personal Networks (Fednet). A Fednet is a secure,...

Declarative Access Control for WebDSL: Combining Language Integration and Separation of Concerns

Preprint of paper published in: ICWE 2008 - 8th International Conference on Web Engineering, 14-18 July 2008; doi:10.1109/ICWE.2008.15 In this paper, we present the extension of WebDSL, a domain-specific language for web application development, with abstractions for declarative definition of access control. The extension supports the definition...