Authors:
Aya Mohamed
1
;
2
;
Dagmar Auer
1
;
2
;
Daniel Hofer
1
;
2
and
Josef Küng
1
;
2
Affiliations:
1
Institute of Application-oriented Knowledge Processing, Johannes Kepler University Linz, Linz, Austria
;
2
LIT Secure and Correct Systems Lab, Johannes Kepler University Linz, Linz, Austria
Keyword(s):
Access Control, Authorization Policy, ABAC, ReBAC, Graph-Structured Data, Property Graph.
Abstract:
Access control is the enforcement of the authorization policy, which defines subjects, resources, and access rights. Graph-structured data requires advanced, flexible, and fine-grained access control due to its complex structure as sequences of alternating vertices and edges. Several research works focus on protecting property graph-structured data, enforcing fine-grained access control, and proving the feasibility and applicability of their concept. However, they differ conceptually and technically. To gain a profound overview of the current state of research, we study works from our systematic literature review on authorization and access control for different database models in addition to recent ones. Based on defined criteria, we exclude research works which do not protect graph-structured data, have coarse-grained approaches, consider models other than the property graph model, or have no proof-of-concept implementation. The latest version of the remaining works are discussed i
n detail in terms of their access control approach as well as authorization policy definition and enforcement. Finally, we analyze the strengths and limitations of the selected works and provide a comparison with respect to different aspects, including the base access control model, open/closed policy, negative permission support, and datastore-independent enforcement.
(More)