{"id":"https://openalex.org/W1965457815","doi":"https://doi.org/10.1145/1809842.1809870","title":"An architecture for enforcing end-to-end access control over web applications","display_name":"An architecture for enforcing end-to-end access control over web applications","publication_year":2010,"publication_date":"2010-06-11","ids":{"openalex":"https://openalex.org/W1965457815","doi":"https://doi.org/10.1145/1809842.1809870","mag":"1965457815"},"language":"en","primary_location":{"id":"doi:10.1145/1809842.1809870","is_oa":false,"landing_page_url":"https://doi.org/10.1145/1809842.1809870","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 15th ACM symposium on Access control models and technologies","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5027608838","display_name":"Boniface Hicks","orcid":"https://orcid.org/0000-0003-4113-979X"},"institutions":[{"id":"https://openalex.org/I188871143","display_name":"Saint Vincent College","ror":"https://ror.org/00amjd520","country_code":"US","type":"education","lineage":["https://openalex.org/I188871143"]}],"countries":["US"],"is_corresponding":true,"raw_author_name":"Boniface Hicks","raw_affiliation_strings":["Saint Vincent College, Latrobe, PA, USA"],"affiliations":[{"raw_affiliation_string":"Saint Vincent College, Latrobe, PA, USA","institution_ids":["https://openalex.org/I188871143"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5087279722","display_name":"Sandra Rueda","orcid":"https://orcid.org/0000-0002-2111-9348"},"institutions":[{"id":"https://openalex.org/I130769515","display_name":"Pennsylvania State University","ror":"https://ror.org/04p491231","country_code":"US","type":"education","lineage":["https://openalex.org/I130769515"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Sandra Rueda","raw_affiliation_strings":["The Pennsylvania State University, University Park, PA, USA","The Pennsylvania State University , University Park, PA, USA"],"affiliations":[{"raw_affiliation_string":"The Pennsylvania State University, University Park, PA, USA","institution_ids":["https://openalex.org/I130769515"]},{"raw_affiliation_string":"The Pennsylvania State University , University Park, PA, USA","institution_ids":["https://openalex.org/I130769515"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5018020310","display_name":"Dave King","orcid":null},"institutions":[{"id":"https://openalex.org/I130769515","display_name":"Pennsylvania State University","ror":"https://ror.org/04p491231","country_code":"US","type":"education","lineage":["https://openalex.org/I130769515"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Dave King","raw_affiliation_strings":["The Pennsylvania State University, University Park, PA, USA","The Pennsylvania State University , University Park, PA, USA"],"affiliations":[{"raw_affiliation_string":"The Pennsylvania State University, University Park, PA, USA","institution_ids":["https://openalex.org/I130769515"]},{"raw_affiliation_string":"The Pennsylvania State University , University Park, PA, USA","institution_ids":["https://openalex.org/I130769515"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5108616391","display_name":"Thomas Moyer","orcid":null},"institutions":[{"id":"https://openalex.org/I130769515","display_name":"Pennsylvania State University","ror":"https://ror.org/04p491231","country_code":"US","type":"education","lineage":["https://openalex.org/I130769515"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Thomas Moyer","raw_affiliation_strings":["The Pennsylvania State University, University Park, PA, USA","The Pennsylvania State University , University Park, PA, USA"],"affiliations":[{"raw_affiliation_string":"The Pennsylvania State University, University Park, PA, USA","institution_ids":["https://openalex.org/I130769515"]},{"raw_affiliation_string":"The Pennsylvania State University , University Park, PA, USA","institution_ids":["https://openalex.org/I130769515"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5016713615","display_name":"Joshua Schiffman","orcid":null},"institutions":[{"id":"https://openalex.org/I130769515","display_name":"Pennsylvania State University","ror":"https://ror.org/04p491231","country_code":"US","type":"education","lineage":["https://openalex.org/I130769515"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Joshua Schiffman","raw_affiliation_strings":["The Pennsylvania State University, University Park, PA, USA","The Pennsylvania State University , University Park, PA, USA"],"affiliations":[{"raw_affiliation_string":"The Pennsylvania State University, University Park, PA, USA","institution_ids":["https://openalex.org/I130769515"]},{"raw_affiliation_string":"The Pennsylvania State University , University Park, PA, USA","institution_ids":["https://openalex.org/I130769515"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5074936020","display_name":"Yogesh Sreenivasan","orcid":null},"institutions":[{"id":"https://openalex.org/I130769515","display_name":"Pennsylvania State University","ror":"https://ror.org/04p491231","country_code":"US","type":"education","lineage":["https://openalex.org/I130769515"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Yogesh Sreenivasan","raw_affiliation_strings":["The Pennsylvania State University, University Park, PA, USA","The Pennsylvania State University , University Park, PA, USA"],"affiliations":[{"raw_affiliation_string":"The Pennsylvania State University, University Park, PA, USA","institution_ids":["https://openalex.org/I130769515"]},{"raw_affiliation_string":"The Pennsylvania State University , University Park, PA, USA","institution_ids":["https://openalex.org/I130769515"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5055368149","display_name":"Patrick McDaniel","orcid":"https://orcid.org/0000-0003-2091-7484"},"institutions":[{"id":"https://openalex.org/I130769515","display_name":"Pennsylvania State University","ror":"https://ror.org/04p491231","country_code":"US","type":"education","lineage":["https://openalex.org/I130769515"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Patrick McDaniel","raw_affiliation_strings":["The Pennsylvania State University, University Park, PA, USA","The Pennsylvania State University , University Park, PA, USA"],"affiliations":[{"raw_affiliation_string":"The Pennsylvania State University, University Park, PA, USA","institution_ids":["https://openalex.org/I130769515"]},{"raw_affiliation_string":"The Pennsylvania State University , University Park, PA, USA","institution_ids":["https://openalex.org/I130769515"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5055045569","display_name":"Trent Jaeger","orcid":"https://orcid.org/0000-0002-4964-1170"},"institutions":[{"id":"https://openalex.org/I130769515","display_name":"Pennsylvania State University","ror":"https://ror.org/04p491231","country_code":"US","type":"education","lineage":["https://openalex.org/I130769515"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Trent Jaeger","raw_affiliation_strings":["The Pennsylvania State University, University Park, PA, USA","The Pennsylvania State University , University Park, PA, USA"],"affiliations":[{"raw_affiliation_string":"The Pennsylvania State University, University Park, PA, USA","institution_ids":["https://openalex.org/I130769515"]},{"raw_affiliation_string":"The Pennsylvania State University , University Park, PA, USA","institution_ids":["https://openalex.org/I130769515"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":8,"corresponding_author_ids":["https://openalex.org/A5027608838"],"corresponding_institution_ids":["https://openalex.org/I188871143"],"apc_list":null,"apc_paid":null,"fwci":5.4126,"has_fulltext":false,"cited_by_count":23,"citation_normalized_percentile":{"value":0.95350365,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":89,"max":99},"biblio":{"volume":null,"issue":null,"first_page":"163","last_page":"172"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9980999827384949,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/end-to-end-principle","display_name":"End-to-end principle","score":0.708977997303009},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7029880285263062},{"id":"https://openalex.org/keywords/architecture","display_name":"Architecture","score":0.6307892799377441},{"id":"https://openalex.org/keywords/end-user","display_name":"End user","score":0.505774736404419},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.4972558319568634},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.30243295431137085}],"concepts":[{"id":"https://openalex.org/C74296488","wikidata":"https://www.wikidata.org/wiki/Q2527392","display_name":"End-to-end principle","level":2,"score":0.708977997303009},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7029880285263062},{"id":"https://openalex.org/C123657996","wikidata":"https://www.wikidata.org/wiki/Q12271","display_name":"Architecture","level":2,"score":0.6307892799377441},{"id":"https://openalex.org/C91262260","wikidata":"https://www.wikidata.org/wiki/Q528074","display_name":"End user","level":2,"score":0.505774736404419},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.4972558319568634},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.30243295431137085},{"id":"https://openalex.org/C142362112","wikidata":"https://www.wikidata.org/wiki/Q735","display_name":"Art","level":0,"score":0.0},{"id":"https://openalex.org/C153349607","wikidata":"https://www.wikidata.org/wiki/Q36649","display_name":"Visual arts","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/1809842.1809870","is_oa":false,"landing_page_url":"https://doi.org/10.1145/1809842.1809870","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 15th ACM symposium on Access control models and technologies","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.6100000143051147,"display_name":"Industry, innovation and infrastructure","id":"https://metadata.un.org/sdg/9"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":29,"referenced_works":["https://openalex.org/W191839766","https://openalex.org/W1495495588","https://openalex.org/W1565356083","https://openalex.org/W1737016141","https://openalex.org/W1966143594","https://openalex.org/W1983142587","https://openalex.org/W1991895580","https://openalex.org/W2003189607","https://openalex.org/W2053741629","https://openalex.org/W2057718232","https://openalex.org/W2060857434","https://openalex.org/W2071530078","https://openalex.org/W2072978486","https://openalex.org/W2095610745","https://openalex.org/W2103834013","https://openalex.org/W2108810805","https://openalex.org/W2131726714","https://openalex.org/W2133113868","https://openalex.org/W2134296086","https://openalex.org/W2138628156","https://openalex.org/W2139729795","https://openalex.org/W2149684006","https://openalex.org/W2154220454","https://openalex.org/W2159079348","https://openalex.org/W2168084064","https://openalex.org/W2168563136","https://openalex.org/W4244704438","https://openalex.org/W4247465700","https://openalex.org/W6808419535"],"related_works":["https://openalex.org/W4299590256","https://openalex.org/W2951281592","https://openalex.org/W2166381389","https://openalex.org/W4284893874","https://openalex.org/W3163634122","https://openalex.org/W3119482857","https://openalex.org/W2919182614","https://openalex.org/W333503034","https://openalex.org/W2054736184","https://openalex.org/W3159728998"],"abstract_inverted_index":{"The":[0,60],"web":[1,37,66,141],"is":[2,63],"now":[3],"being":[4],"used":[5],"as":[6],"a":[7,35,48],"general":[8],"platform":[9],"for":[10,71,135],"hosting":[11],"distributed":[12],"applications":[13,27],"like":[14],"wikis,":[15],"bulletin":[16],"board":[17],"messaging":[18],"systems":[19],"and":[20,58,115,137,149],"collaborative":[21],"editing":[22],"environments.":[23],"Data":[24],"from":[25],"multiple":[26,30],"originating":[28],"at":[29,100,128],"sources":[31],"all":[32],"intermix":[33],"in":[34,43],"single":[36],"browser,":[38,142],"making":[39],"sensitive":[40],"data":[41,156],"stored":[42],"the":[44,92,101,129],"browser":[45],"subject":[46],"to":[47],"broad":[49],"milieu":[50],"of":[51,94],"attacks":[52],"(cross-site":[53],"scripting,":[54],"cross-site":[55],"request":[56],"forgery":[57],"others).":[59],"fundamental":[61],"problem":[62],"that":[64,151],"existing":[65],"infrastructure":[67],"provides":[68],"no":[69],"means":[70],"enforcing":[72],"end-to-end":[73,161],"security":[74,162],"on":[75],"data.":[76],"To":[77],"solve":[78],"this":[79],"we":[80],"design":[81],"an":[82],"architecture":[83,121],"using":[84,122],"mandatory":[85],"access":[86],"control":[87],"(MAC)":[88],"enforcement.":[89],"We":[90,118,145],"overcome":[91],"limitations":[93],"traditional":[95],"MAC":[96,107],"systems,":[97],"implemented":[98],"solely":[99],"operating":[102,112,130],"system":[103,131],"layer,":[104,132],"by":[105],"unifying":[106],"enforcement":[108],"across":[109],"virtual":[110,124],"machine,":[111],"system,":[113],"networking":[114,136],"application":[116],"layers.":[117],"implement":[119],"our":[120,138,147],"Xen":[123],"machine":[125],"management,":[126],"SELinux":[127],"labeled":[133],"IPsec":[134],"own":[139],"label-enforcing":[140],"called":[143],"FlowwolF.":[144],"tested":[146],"implementation":[148],"find":[150],"it":[152],"performs":[153],"well,":[154],"supporting":[155],"intermixing":[157],"while":[158],"still":[159],"providing":[160],"guarantees.":[163]},"counts_by_year":[{"year":2021,"cited_by_count":1},{"year":2019,"cited_by_count":2},{"year":2018,"cited_by_count":1},{"year":2016,"cited_by_count":3},{"year":2015,"cited_by_count":3},{"year":2014,"cited_by_count":1},{"year":2013,"cited_by_count":6},{"year":2012,"cited_by_count":4}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}