{"id":"https://openalex.org/W2011328746","doi":"https://doi.org/10.1109/iscc.2014.6912546","title":"Role-Based Access control mechanisms","display_name":"Role-Based Access control mechanisms","publication_year":2014,"publication_date":"2014-06-01","ids":{"openalex":"https://openalex.org/W2011328746","doi":"https://doi.org/10.1109/iscc.2014.6912546","mag":"2011328746"},"language":"en","primary_location":{"id":"doi:10.1109/iscc.2014.6912546","is_oa":false,"landing_page_url":"https://doi.org/10.1109/iscc.2014.6912546","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2014 IEEE Symposium on Computers and Communications (ISCC)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"http://hdl.handle.net/10773/13119","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5042763707","display_name":"\u00d3scar Mort\u00e1gua Pereira","orcid":"https://orcid.org/0000-0002-1742-6927"},"institutions":[{"id":"https://openalex.org/I4210120471","display_name":"Instituto de Telecomunica\u00e7\u00f5es","ror":"https://ror.org/02ht4fk33","country_code":"PT","type":"nonprofit","lineage":["https://openalex.org/I4210120471"]},{"id":"https://openalex.org/I60858718","display_name":"University of Aveiro","ror":"https://ror.org/00nt41z93","country_code":"PT","type":"education","lineage":["https://openalex.org/I60858718"]}],"countries":["PT"],"is_corresponding":true,"raw_author_name":"Oscar Mortagua Pereira","raw_affiliation_strings":["Instituto de Telecomunica\u00e7\u00f5es, DETI \u2013 University of Aveiro, Aveiro, Portugal","Instituto de Telecomunica\u00e7\u00f5es, DETI - University of Aveiro, 3810-193, Portugal"],"affiliations":[{"raw_affiliation_string":"Instituto de Telecomunica\u00e7\u00f5es, DETI \u2013 University of Aveiro, Aveiro, Portugal","institution_ids":["https://openalex.org/I4210120471","https://openalex.org/I60858718"]},{"raw_affiliation_string":"Instituto de Telecomunica\u00e7\u00f5es, DETI - University of Aveiro, 3810-193, Portugal","institution_ids":["https://openalex.org/I60858718"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5069369120","display_name":"Diogo Domingues Regateiro","orcid":"https://orcid.org/0000-0002-9569-9656"},"institutions":[{"id":"https://openalex.org/I4210120471","display_name":"Instituto de Telecomunica\u00e7\u00f5es","ror":"https://ror.org/02ht4fk33","country_code":"PT","type":"nonprofit","lineage":["https://openalex.org/I4210120471"]},{"id":"https://openalex.org/I60858718","display_name":"University of Aveiro","ror":"https://ror.org/00nt41z93","country_code":"PT","type":"education","lineage":["https://openalex.org/I60858718"]}],"countries":["PT"],"is_corresponding":false,"raw_author_name":"Diogo Domingues Regateiro","raw_affiliation_strings":["Instituto de Telecomunica\u00e7\u00f5es, DETI \u2013 University of Aveiro, Aveiro, Portugal","Instituto de Telecomunica\u00e7\u00f5es, DETI - University of Aveiro, 3810-193, Portugal"],"affiliations":[{"raw_affiliation_string":"Instituto de Telecomunica\u00e7\u00f5es, DETI \u2013 University of Aveiro, Aveiro, Portugal","institution_ids":["https://openalex.org/I4210120471","https://openalex.org/I60858718"]},{"raw_affiliation_string":"Instituto de Telecomunica\u00e7\u00f5es, DETI - University of Aveiro, 3810-193, Portugal","institution_ids":["https://openalex.org/I60858718"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5090429145","display_name":"Rui L. Aguiar","orcid":"https://orcid.org/0000-0003-0107-6253"},"institutions":[{"id":"https://openalex.org/I4210120471","display_name":"Instituto de Telecomunica\u00e7\u00f5es","ror":"https://ror.org/02ht4fk33","country_code":"PT","type":"nonprofit","lineage":["https://openalex.org/I4210120471"]},{"id":"https://openalex.org/I60858718","display_name":"University of Aveiro","ror":"https://ror.org/00nt41z93","country_code":"PT","type":"education","lineage":["https://openalex.org/I60858718"]}],"countries":["PT"],"is_corresponding":false,"raw_author_name":"Rui L. Aguiar","raw_affiliation_strings":["Instituto de Telecomunica\u00e7\u00f5es, DETI \u2013 University of Aveiro, Aveiro, Portugal","Instituto de Telecomunica\u00e7\u00f5es, DETI - University of Aveiro, 3810-193, Portugal"],"affiliations":[{"raw_affiliation_string":"Instituto de Telecomunica\u00e7\u00f5es, DETI \u2013 University of Aveiro, Aveiro, Portugal","institution_ids":["https://openalex.org/I4210120471","https://openalex.org/I60858718"]},{"raw_affiliation_string":"Instituto de Telecomunica\u00e7\u00f5es, DETI - University of Aveiro, 3810-193, Portugal","institution_ids":["https://openalex.org/I60858718"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":["https://openalex.org/A5042763707"],"corresponding_institution_ids":["https://openalex.org/I4210120471","https://openalex.org/I60858718"],"apc_list":null,"apc_paid":null,"fwci":0.9959,"has_fulltext":false,"cited_by_count":5,"citation_normalized_percentile":{"value":0.84729338,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":96},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"7"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10927","display_name":"Access Control and Trust","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},"topics":[{"id":"https://openalex.org/T10927","display_name":"Access Control and Trust","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9990000128746033,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.9983000159263611,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8539076447486877},{"id":"https://openalex.org/keywords/role-based-access-control","display_name":"Role-based access control","score":0.7430813312530518},{"id":"https://openalex.org/keywords/access-control","display_name":"Access control","score":0.673177182674408},{"id":"https://openalex.org/keywords/schema","display_name":"Schema (genetic algorithms)","score":0.5433299541473389},{"id":"https://openalex.org/keywords/java","display_name":"Java","score":0.5247476100921631},{"id":"https://openalex.org/keywords/open-database-connectivity","display_name":"Open Database Connectivity","score":0.4974077045917511},{"id":"https://openalex.org/keywords/security-policy","display_name":"Security policy","score":0.4916725754737854},{"id":"https://openalex.org/keywords/database","display_name":"Database","score":0.46753212809562683},{"id":"https://openalex.org/keywords/database-schema","display_name":"Database schema","score":0.4442339539527893},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.3739517331123352},{"id":"https://openalex.org/keywords/software-engineering","display_name":"Software engineering","score":0.342517614364624},{"id":"https://openalex.org/keywords/database-design","display_name":"Database design","score":0.27793169021606445},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.2586926817893982},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.2510097622871399},{"id":"https://openalex.org/keywords/information-retrieval","display_name":"Information retrieval","score":0.10623389482498169}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8539076447486877},{"id":"https://openalex.org/C45567728","wikidata":"https://www.wikidata.org/wiki/Q1702839","display_name":"Role-based access control","level":3,"score":0.7430813312530518},{"id":"https://openalex.org/C527821871","wikidata":"https://www.wikidata.org/wiki/Q228502","display_name":"Access control","level":2,"score":0.673177182674408},{"id":"https://openalex.org/C52146309","wikidata":"https://www.wikidata.org/wiki/Q7431116","display_name":"Schema (genetic algorithms)","level":2,"score":0.5433299541473389},{"id":"https://openalex.org/C548217200","wikidata":"https://www.wikidata.org/wiki/Q251","display_name":"Java","level":2,"score":0.5247476100921631},{"id":"https://openalex.org/C123327596","wikidata":"https://www.wikidata.org/wiki/Q212606","display_name":"Open Database Connectivity","level":5,"score":0.4974077045917511},{"id":"https://openalex.org/C154908896","wikidata":"https://www.wikidata.org/wiki/Q2167404","display_name":"Security policy","level":2,"score":0.4916725754737854},{"id":"https://openalex.org/C77088390","wikidata":"https://www.wikidata.org/wiki/Q8513","display_name":"Database","level":1,"score":0.46753212809562683},{"id":"https://openalex.org/C30775581","wikidata":"https://www.wikidata.org/wiki/Q632285","display_name":"Database schema","level":3,"score":0.4442339539527893},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3739517331123352},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.342517614364624},{"id":"https://openalex.org/C148840519","wikidata":"https://www.wikidata.org/wiki/Q1049878","display_name":"Database design","level":2,"score":0.27793169021606445},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.2586926817893982},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.2510097622871399},{"id":"https://openalex.org/C23123220","wikidata":"https://www.wikidata.org/wiki/Q816826","display_name":"Information retrieval","level":1,"score":0.10623389482498169},{"id":"https://openalex.org/C194222762","wikidata":"https://www.wikidata.org/wiki/Q114486","display_name":"Query by Example","level":4,"score":0.0},{"id":"https://openalex.org/C164120249","wikidata":"https://www.wikidata.org/wiki/Q995982","display_name":"Web search query","level":3,"score":0.0},{"id":"https://openalex.org/C97854310","wikidata":"https://www.wikidata.org/wiki/Q19541","display_name":"Search engine","level":2,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/iscc.2014.6912546","is_oa":false,"landing_page_url":"https://doi.org/10.1109/iscc.2014.6912546","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2014 IEEE Symposium on Computers and Communications (ISCC)","raw_type":"proceedings-article"},{"id":"pmh:oai:ria.ua.pt:10773/13119","is_oa":true,"landing_page_url":"http://hdl.handle.net/10773/13119","pdf_url":null,"source":{"id":"https://openalex.org/S4306402433","display_name":"Portuguese National Funding Agency for Science, Research and Technology (RCAAP Project by FCT)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"conference object"}],"best_oa_location":{"id":"pmh:oai:ria.ua.pt:10773/13119","is_oa":true,"landing_page_url":"http://hdl.handle.net/10773/13119","pdf_url":null,"source":{"id":"https://openalex.org/S4306402433","display_name":"Portuguese National Funding Agency for Science, Research and Technology (RCAAP Project by FCT)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"conference object"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":23,"referenced_works":["https://openalex.org/W1553884617","https://openalex.org/W1580968850","https://openalex.org/W1978526536","https://openalex.org/W1997199359","https://openalex.org/W2026032080","https://openalex.org/W2028740113","https://openalex.org/W2046444514","https://openalex.org/W2069469189","https://openalex.org/W2088675571","https://openalex.org/W2113820952","https://openalex.org/W2114917462","https://openalex.org/W2157242088","https://openalex.org/W2162039156","https://openalex.org/W2166602595","https://openalex.org/W2208395198","https://openalex.org/W2256815707","https://openalex.org/W2258964029","https://openalex.org/W2294395356","https://openalex.org/W2738444131","https://openalex.org/W6683240777","https://openalex.org/W6692592194","https://openalex.org/W6692689572","https://openalex.org/W6696786625"],"related_works":["https://openalex.org/W2372156812","https://openalex.org/W2374393728","https://openalex.org/W2386545329","https://openalex.org/W2382286253","https://openalex.org/W2356011375","https://openalex.org/W1795360416","https://openalex.org/W2392979115","https://openalex.org/W1969771171","https://openalex.org/W2105261429","https://openalex.org/W318167434"],"abstract_inverted_index":{"Most":[0],"of":[1,46,53,95,126,167,170],"the":[2,51,67,82,114,123,136,168],"security":[3,127],"threats":[4],"in":[5,12,98],"relational":[6],"database":[7,77,99],"applications":[8,100],"have":[9],"their":[10],"source":[11,45],"client-side":[13],"systems":[14],"when":[15],"they":[16],"issue":[17],"requests":[18],"formalized":[19],"by":[20,57,93],"Create,":[21],"Read,":[22],"Update":[23],"and":[24,33,63,103,121,180],"Delete":[25],"(CRUD)":[26],"expressions.":[27],"If":[28],"tools":[29,71],"such":[30],"as":[31],"ODBC":[32],"JDBC":[34],"are":[35,72,152],"used":[36,133],"to":[37,119,134],"develop":[38],"business":[39,96],"logics,":[40],"then":[41,64,132],"there":[42],"is":[43,131],"another":[44],"threats.":[47,128],"In":[48],"some":[49],"situations":[50],"content":[52],"data":[54],"sets":[55],"retrieved":[56],"Select":[58],"expressions":[59],"can":[60,89],"be":[61,91],"modified":[62],"committed":[65],"into":[66],"host":[68],"databases.":[69],"These":[70],"agnostic":[73],"regarding":[74,81],"not":[75],"only":[76],"schemas":[78],"but":[79],"also":[80],"established":[83],"access":[84,105],"control":[85,106],"policies.":[86,107],"This":[87,129],"situation":[88],"hardly":[90],"mastered":[92],"programmers":[94,158],"logics":[97],"with":[101],"many":[102],"complex":[104],"To":[108],"overcome":[109],"this":[110,155],"gap,":[111],"we":[112,141],"extend":[113],"basic":[115],"Role-Based":[116],"Access":[117],"policy":[118],"support":[120],"supervise":[122],"two":[124],"sources":[125],"extension":[130],"design":[135],"correspondent":[137],"RBAC":[138,150],"model.":[139],"Finally,":[140],"present":[142],"a":[143,174],"software":[144],"architectural":[145],"model":[146],"from":[147,159,173],"which":[148],"static":[149],"mechanisms":[151],"automatically":[153],"built,":[154],"way":[156],"relieving":[157],"mastering":[160],"any":[161],"schema.":[162],"We":[163],"demonstrate":[164],"empirical":[165],"evidence":[166],"effectiveness":[169],"our":[171],"proposal":[172],"use":[175],"case":[176],"based":[177],"on":[178],"Java":[179],"JDBC.":[181]},"counts_by_year":[{"year":2024,"cited_by_count":1},{"year":2022,"cited_by_count":1},{"year":2018,"cited_by_count":2},{"year":2014,"cited_by_count":1}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}