An ontology-based secure design framework for graph-based databases

Graph-based databases are concerned with performance and flexibility. Most of the existing approaches used to design secure NoSQL databases are limited to the final implementation stage, and do not involve the design of security and access control issues at higher abstraction levels. Ensuring securi...

Full description

Bibliographic Details
Authors: Paneque, Manuel, Roldán García, María del Mar, Blanco Bueno, Carlos|||0000-0001-9001-0904, Maté, Alejandro, Rosado, David G., Trujillo, Juan Carlos
Format: article
Publication Date:2024
Country:España
Institution:Universidad de Cantabria (UC)
Repository:UCrea Repositorio Abierto de la Universidad de Cantabria
Language:English
OAI Identifier:oai:repositorio.unican.es:10902/30710
Online Access:https://hdl.handle.net/10902/30710
Access Level:Open access
Keyword:Ontology
Security
Reasoning
Knowledge extraction
Healthcare
id ES_a8f88e8c27d24df256e2aace7d9cc0b2
oai_identifier_str oai:repositorio.unican.es:10902/30710
network_acronym_str ES
network_name_str España
repository_id_str
spelling An ontology-based secure design framework for graph-based databasesPaneque, ManuelRoldán García, María del MarBlanco Bueno, Carlos|||0000-0001-9001-0904Maté, AlejandroRosado, David G.Trujillo, Juan CarlosOntologySecurityReasoningKnowledge extractionHealthcareGraph-based databases are concerned with performance and flexibility. Most of the existing approaches used to design secure NoSQL databases are limited to the final implementation stage, and do not involve the design of security and access control issues at higher abstraction levels. Ensuring security and access control for Graph-based databases is difficult, as each approach differs significantly depending on the technology employed. In this paper, we propose the first technology-ascetic framework with which to design secure Graph-based databases. Our proposal raises the abstraction level by using ontologies to simultaneously model database and security requirements together. This is supported by the TITAN framework, which facilitates the way in which both aspects are dealt with. The great advantages of our approach are, therefore, that it: allows database designers to focus on the simultaneous protection of security and data while ignoring the implementation details; facilitates the secure design and rapid migration of security rules by deriving specific security measures for each underlying technology, and enables database designers to employ ontology reasoning in order to verify whether the security rules are consistent. We show the applicability of our proposal by applying it to a case study based on a hospital data access control.This work has been developed within the AETHER-UA (PID2020-112540RB-C43), AETHER-UMA (PID2020-112540RB-C41) and AETHER-UCLM (PID2020-112540RB-C42), ALBA (TED2021-130355B-C31, TED2021-130355B-C33), PRESECREL (PID2021-124502OB-C42) projects funded by the “Ministerio de Ciencia e Innovación, Spain”, Andalusian PAIDI program with grant (P18-RT-2799) and the BALLADER Project (PROMETEO/2021/088) funded by the “Consellería de Innovación, Universidades, Ciencia Sociedad Digital”, Generalitat Valenciana, Spain . Funding for open access charge: Universidad de Málaga / CBUA.ElsevierUniversidad de Cantabria20242024-03-01journal articlehttp://purl.org/coar/resource_type/c_6501NAhttp://purl.org/coar/version/c_be7fb7dd8ff6fe43info:eu-repo/semantics/articlehttps://hdl.handle.net/10902/30710Computer Standards and Interfaces, 2024, 88, 103801reponame:UCrea Repositorio Abierto de la Universidad de Cantabriainstname:Universidad de Cantabria (UC)Inglésengopen accesshttp://purl.org/coar/access_right/c_abf2Attribution-NonCommercial-NoDerivatives 4.0 Internationalhttp://creativecommons.org/licenses/by-nc-nd/4.0/info:eu-repo/semantics/openAccessoai:repositorio.unican.es:10902/307102026-06-02T12:39:31Z
dc.title.none.fl_str_mv An ontology-based secure design framework for graph-based databases
title An ontology-based secure design framework for graph-based databases
spellingShingle An ontology-based secure design framework for graph-based databases
Paneque, Manuel
Ontology
Security
Reasoning
Knowledge extraction
Healthcare
title_short An ontology-based secure design framework for graph-based databases
title_full An ontology-based secure design framework for graph-based databases
title_fullStr An ontology-based secure design framework for graph-based databases
title_full_unstemmed An ontology-based secure design framework for graph-based databases
title_sort An ontology-based secure design framework for graph-based databases
dc.creator.none.fl_str_mv Paneque, Manuel
Roldán García, María del Mar
Blanco Bueno, Carlos|||0000-0001-9001-0904
Maté, Alejandro
Rosado, David G.
Trujillo, Juan Carlos
author Paneque, Manuel
author_facet Paneque, Manuel
Roldán García, María del Mar
Blanco Bueno, Carlos|||0000-0001-9001-0904
Maté, Alejandro
Rosado, David G.
Trujillo, Juan Carlos
author_role author
author2 Roldán García, María del Mar
Blanco Bueno, Carlos|||0000-0001-9001-0904
Maté, Alejandro
Rosado, David G.
Trujillo, Juan Carlos
author2_role author
author
author
author
author
dc.contributor.none.fl_str_mv Universidad de Cantabria
dc.subject.none.fl_str_mv Ontology
Security
Reasoning
Knowledge extraction
Healthcare
topic Ontology
Security
Reasoning
Knowledge extraction
Healthcare
description Graph-based databases are concerned with performance and flexibility. Most of the existing approaches used to design secure NoSQL databases are limited to the final implementation stage, and do not involve the design of security and access control issues at higher abstraction levels. Ensuring security and access control for Graph-based databases is difficult, as each approach differs significantly depending on the technology employed. In this paper, we propose the first technology-ascetic framework with which to design secure Graph-based databases. Our proposal raises the abstraction level by using ontologies to simultaneously model database and security requirements together. This is supported by the TITAN framework, which facilitates the way in which both aspects are dealt with. The great advantages of our approach are, therefore, that it: allows database designers to focus on the simultaneous protection of security and data while ignoring the implementation details; facilitates the secure design and rapid migration of security rules by deriving specific security measures for each underlying technology, and enables database designers to employ ontology reasoning in order to verify whether the security rules are consistent. We show the applicability of our proposal by applying it to a case study based on a hospital data access control.
publishDate 2024
dc.date.none.fl_str_mv 2024
2024-03-01
dc.type.none.fl_str_mv journal article
http://purl.org/coar/resource_type/c_6501
NA
http://purl.org/coar/version/c_be7fb7dd8ff6fe43
dc.type.openaire.fl_str_mv info:eu-repo/semantics/article
format article
dc.identifier.none.fl_str_mv https://hdl.handle.net/10902/30710
url https://hdl.handle.net/10902/30710
dc.language.none.fl_str_mv Inglés
eng
language_invalid_str_mv Inglés
language eng
dc.rights.none.fl_str_mv open access
http://purl.org/coar/access_right/c_abf2
Attribution-NonCommercial-NoDerivatives 4.0 International
http://creativecommons.org/licenses/by-nc-nd/4.0/
dc.rights.openaire.fl_str_mv info:eu-repo/semantics/openAccess
rights_invalid_str_mv open access
http://purl.org/coar/access_right/c_abf2
Attribution-NonCommercial-NoDerivatives 4.0 International
http://creativecommons.org/licenses/by-nc-nd/4.0/
eu_rights_str_mv openAccess
dc.publisher.none.fl_str_mv Elsevier
publisher.none.fl_str_mv Elsevier
dc.source.none.fl_str_mv Computer Standards and Interfaces, 2024, 88, 103801
reponame:UCrea Repositorio Abierto de la Universidad de Cantabria
instname:Universidad de Cantabria (UC)
instname_str Universidad de Cantabria (UC)
reponame_str UCrea Repositorio Abierto de la Universidad de Cantabria
collection UCrea Repositorio Abierto de la Universidad de Cantabria
repository.name.fl_str_mv
repository.mail.fl_str_mv
_version_ 1869415962177961984
score 15,301629

Similar Items