e-space
Manchester Metropolitan University's Research Repository

    Enhancing and simplifying data security and privacy for multitiered applications

    Rjaibi, W and Hammoudeh, M ORCID logoORCID: https://orcid.org/0000-0003-1058-0996 (2020) Enhancing and simplifying data security and privacy for multitiered applications. Journal of Parallel and Distributed Computing, 139. pp. 53-64. ISSN 0743-7315

    [img]
    Preview
    Accepted Version
    Available under License In Copyright.

    Download (418kB) | Preview

    Abstract

    © 2020 Elsevier Inc. While databases provide capabilities to enforce security and privacy policies, two major issues still prevent applications from safely delegating such policies to the database. The first one is the loss of user identity in multitiered environments which renders the database security features of little to no value. The second issue is the unsafe coexistence between the security capabilities and fundamental database tenets which creates data leakage vulnerabilities. This paper proposes extensions to database systems to allow applications, such as those used in managing the operations of energy clouds, to safely delegate the security and privacy policies to the database. This delegation reduces complexity for applications and improves overall data security and privacy. Our performance evaluation shows that almost all the TPC-H queries perform the same or better when the security policy is enforced by the database. For the set of queries that performed better, the improvement observed ranges from 8 to 68%.

    Impact and Reach

    Statistics

    Activity Overview
    6 month trend
    422Downloads
    6 month trend
    225Hits

    Additional statistics for this dataset are available via IRStats2.

    Altmetric

    Repository staff only

    Edit record Edit record