The SUDO Framework: For Data Organization And Efficient Query Authorization For NoSQL Databases

Simple item page
dc.contributor.advisorFong, Philip W. L.
dc.contributor.authorRizvi, Syed Zain R.
dc.contributor.committeememberFong, Philip W. L.
dc.contributor.committeememberBarker, Kenneth E.
dc.contributor.committeememberSafavi-Naeini, Reyhaneh A.
dc.contributor.committeememberZach, Richard
dc.contributor.committeememberReardon, Joel C.
dc.contributor.committeememberTawbi, Nadia
dc.dateWinter Conferral
dc.date.accessioned2023-02-11T00:32:10Z
dc.date.embargolift2023-02-22
dc.date.issued2020-12-07
dc.description.abstractDue to the variety of NoSQL databases and database models, along with their schemaless nature, it has been a challenge to develop a framework that can enforce fine-grained access control policies and can be applicable to multiple NoSQL databases ranging over a variety of database models. In this thesis we present SUDO: Semi- / Unstructured Data Organization Framework for defining pseudo-dynamic schemata. The SUDO framework is comprised of four main features. i) SUDO is designed to be applicable to multiple NoSQL database technologies and models. ii) SUDO operates between the database and the application layer. iii) SUDO provides the tools for defining a pseudo-dynamic schema for databases with semi-structured or unstructured data. The pseudo-dynamic schema is based on Description Logic ontology. iv) SUDO provides the tools for validating database queries against that pseudo-dynamic schema and weaving queries and access control policies to simultaneously evaluate and authorize the query results.We present the SUDO framework in three parts. First, we present AReBAC, an attribute-supporting ReBAC model for Neo4j, a graph database. AReBAC focuses on weaving queries and policies for efficient authorization. AReBAC is also accompanied by GP-Eval, a query evaluation algorithm that surprisingly performs orders of magnitudes faster than the Cypher query evaluation engine provided by Neo4j, and introduces a new constraint satisfaction programming technique that we dubbed Live-End Backjumping. Next, we present SUDO as a framework for MongoDB, a document-based database. At this stage we focus on defining a pseudo-dynamic schema for a MongoDB state, and validating database queries against the pseudo-dynamic schema. Finally, we further extend SUDO by presenting a set of relations between queries and polices required to weave the two together and form a query that simultaneously evaluates and authorizes the query results. We also present a set of tests to verify if a query and a policy are compatible with each other, and identify the reason for incompatibility (if any). We then generalize SUDO so that it is not only specific to MongoDB, by presenting AReBAC as an extension of SUDO, and applying SUDO to Cassandra, a wide-column database.
dc.identifier.citationRizvi, S. R. (2020). The SUDO Framework: For Data Organization And Efficient Query Authorization For NoSQL Databases (Doctoral thesis, University of Calgary, Calgary, Canada). Retrieved from https://prism.ucalgary.ca.
dc.identifier.urihttp://hdl.handle.net/1880/115855
dc.identifier.urihttps://dx.doi.org/10.11575/PRISM/40749
dc.language.isoenen
dc.language.isoEnglish
dc.publisher.facultyGraduate Studiesen
dc.publisher.facultyScience
dc.publisher.institutionUniversity of Calgaryen
dc.rightsUniversity of Calgary graduate students retain copyright ownership and moral rights for their thesis. You may use this material in any way that is permitted by the Copyright Act or through licensing that has been assigned to the document. For uses that are not allowable under copyright legislation or licensing, you are required to seek permission.en
dc.subjectSecurity
dc.subjectAccess Control
dc.subjectRelationship-Based Access Control
dc.subjectReBAC
dc.subjectAttribute-Supporting Relationship-Based Access Contrl
dc.subjectAReBAC
dc.subjectDatabase
dc.subjectSchema
dc.subjectNeo4j
dc.subjectMongoDB
dc.subjectCassandra: NoSQL
dc.subjectDynamic Schema
dc.subjectPseudo-Dynamic Schema
dc.subjectSUDO
dc.subject.classificationComputer Science
dc.titleThe SUDO Framework: For Data Organization And Efficient Query Authorization For NoSQL Databases
dc.typedoctoral thesis
thesis.degree.disciplineComputer Science
thesis.degree.grantorUniversity of Calgaryen
thesis.degree.grantorUniversity of Calgary
thesis.degree.nameDoctor of Philosophy (PhD)
Files
Original bundle
Now showing 1 - 1 of 1
Thumbnail Image
Name:
ucalgary_2020_rizvi_syed.pdf
Size:
2.16 MB
Format:
Adobe Portable Document Format
Download
License bundle
Now showing 1 - 1 of 1
No Thumbnail Available
Name:
license.txt
Size:
2.6 KB
Format:
Plain Text
Description:
Download
Collections
Open Theses and Dissertations