关系数据库中基于安全策略的数据访问控制模型

关系数据库中传统的强制访问控制、自主访问控制以及目前常用的基于角色的访问控制机制已难以满足对数据安全与隐私的管理，常用的解决方法是通过修改应用程序代码将访问控制规则加载到应用中，而这种方法的最大缺陷是用户可以用数据库访问工具（如SQLPLUS）绕开应用以非法读取数据。提出一个不依赖应用程序代码的访问控制模型。它是用规则表、元数据、查询改写技术来对数据进行访问的数据库访问控制机制；并分析了模型运行的效率，给出模型对不同粒度数据访问控制的扩展方法。

A Supporting Security Policy-Based Access Control Model in Relational Database

Traditional access control mechanism such as Mandatory Access Control, Discretional Access Control and Role-based Access Control don＇ t satisfy the needs to manage data for security and privacy. We often use the method of modifying application code to enforce policy, but user can use database tool to bypass the applications in this circumstance. In this paper we represent a supporting policy-based access control model which enforce policy based on rules-table and metadata as well as query modifying technology in relational database. Finally, we analyze the model efficiency running under oracle10g ,and expend the model functions for Fine-grained Access Control.