\relax \@writefile{toc}{\contentsline {chapter}{\numberline {1}Introduction}{15}{chapter.1}} \@writefile{lof}{\addvspace {10\p@ }} \@writefile{lot}{\addvspace {10\p@ }} \citation{dac-db} \citation{Qiu85trustedcomputer} \citation{rbac} \citation{rulebased} \citation{mysql} \citation{sciam} \@writefile{toc}{\contentsline {chapter}{\numberline {2}Discussion of Semantic Web Technologies}{19}{chapter.2}} \@writefile{lof}{\addvspace {10\p@ }} \@writefile{lot}{\addvspace {10\p@ }} \@writefile{toc}{\contentsline {section}{\numberline {2.1}What is the Semantic Web?}{19}{section.2.1}} \citation{swa} \citation{swot} \citation{uris} \@writefile{lof}{\contentsline {figure}{\numberline {2-1}{\ignorespaces Semantic Web ``layer cake,'' showing how components relate\cite {swot}.}}{20}{figure.2.1}} \newlabel{layercake}{{2-1}{20}{What is the Semantic Web?\relax }{figure.2.1}{}} \@writefile{toc}{\contentsline {section}{\numberline {2.2}The URI}{20}{section.2.2}} \@writefile{toc}{\contentsline {section}{\numberline {2.3}HyperText Markup Language and the eXtensible Markup Language}{21}{section.2.3}} \citation{rdf} \citation{rdf-syntax} \citation{rdf} \@writefile{lof}{\contentsline {figure}{\numberline {2-2}{\ignorespaces The RDF logo. Its structure suggests the triple pattern. From \cite {rdf}.}}{22}{figure.2.2}} \newlabel{rdflogo}{{2-2}{22}{Resource Description Framework and the Triple\relax }{figure.2.2}{}} \@writefile{toc}{\contentsline {section}{\numberline {2.4}Resource Description Framework and the Triple}{22}{section.2.4}} \@writefile{lot}{\contentsline {table}{\numberline {2.1}{\ignorespaces Expressing natural language as triples.}}{23}{table.2.1}} \newlabel{basic-triples}{{2.1}{23}{Resource Description Framework and the Triple\relax }{table.2.1}{}} \@writefile{lot}{\contentsline {table}{\numberline {2.2}{\ignorespaces Expressing natural language as triples.}}{23}{table.2.2}} \newlabel{jane-triples}{{2.2}{23}{Resource Description Framework and the Triple\relax }{table.2.2}{}} \citation{owl} \@writefile{toc}{\contentsline {section}{\numberline {2.5}Notation 3}{24}{section.2.5}} \citation{sparql} \@writefile{toc}{\contentsline {section}{\numberline {2.6}OWL, the Web Ontology Language}{25}{section.2.6}} \@writefile{toc}{\contentsline {section}{\numberline {2.7}The Triple Store and SPARQL}{25}{section.2.7}} \citation{sparql} \citation{sparql} \citation{sparql} \@writefile{lof}{\contentsline {figure}{\numberline {2-3}{\ignorespaces A sample RDF data set, using backslash to denote newline. From \cite {sparql}.}}{26}{figure.2.3}} \newlabel{sparql-01}{{2-3}{26}{The Triple Store and SPARQL\relax }{figure.2.3}{}} \@writefile{lof}{\contentsline {figure}{\numberline {2-4}{\ignorespaces A sample SPARQL query. From \cite {sparql}.}}{26}{figure.2.4}} \newlabel{sparql-02}{{2-4}{26}{The Triple Store and SPARQL\relax }{figure.2.4}{}} \@writefile{lot}{\contentsline {table}{\numberline {2.3}{\ignorespaces The output of a basic SPARQL query.}}{26}{table.2.3}} \newlabel{sparql-03}{{2.3}{26}{The Triple Store and SPARQL\relax }{table.2.3}{}} \@writefile{toc}{\contentsline {section}{\numberline {2.8}Tabulator}{27}{section.2.8}} \@writefile{toc}{\contentsline {section}{\numberline {2.9}Semantic Web Summary}{27}{section.2.9}} \@writefile{toc}{\contentsline {chapter}{\numberline {3}Semantic Reasoning Technologies}{29}{chapter.3}} \@writefile{lof}{\addvspace {10\p@ }} \@writefile{lot}{\addvspace {10\p@ }} \@writefile{toc}{\contentsline {section}{\numberline {3.1}Background Theory}{29}{section.3.1}} \@writefile{toc}{\contentsline {subsection}{\numberline {3.1.1}Forward Chaining}{29}{subsection.3.1.1}} \citation{rete} \citation{swap} \@writefile{toc}{\contentsline {subsection}{\numberline {3.1.2}Production Rule Systems}{30}{subsection.3.1.2}} \@writefile{toc}{\contentsline {subsection}{\numberline {3.1.3}The Rete Algorithm}{30}{subsection.3.1.3}} \citation{cwm-cwmrete} \citation{amord} \citation{rein} \@writefile{toc}{\contentsline {section}{\numberline {3.2}Prior Reasoning Tools}{31}{section.3.2}} \@writefile{toc}{\contentsline {subsection}{\numberline {3.2.1}Semantic Web Application Platform}{31}{subsection.3.2.1}} \@writefile{toc}{\contentsline {subsection}{\numberline {3.2.2}cwm and cwmrete}{31}{subsection.3.2.2}} \@writefile{toc}{\contentsline {section}{\numberline {3.3}Accountability in RDF}{31}{section.3.3}} \citation{s0} \citation{air-t} \@writefile{toc}{\contentsline {section}{\numberline {3.4}A Brief AIR Tutorial}{32}{section.3.4}} \@writefile{lof}{\contentsline {figure}{\numberline {3-1}{\ignorespaces Diagram of the AIR policy language ontology.}}{33}{figure.3.1}} \newlabel{air-ontology}{{3-1}{33}{Accountability in RDF\relax }{figure.3.1}{}} \@writefile{toc}{\contentsline {section}{\numberline {3.5}Reasoner Summary}{36}{section.3.5}} \citation{info-account} \@writefile{toc}{\contentsline {chapter}{\numberline {4}The Need for Policy Assurance}{37}{chapter.4}} \@writefile{lof}{\addvspace {10\p@ }} \@writefile{lot}{\addvspace {10\p@ }} \@writefile{toc}{\contentsline {section}{\numberline {4.1}Introduction to Policy Assurance}{37}{section.4.1}} \citation{prop-iarpa} \citation{iarpa-pir-slides} \citation{iarpa-pir-slides} \@writefile{toc}{\contentsline {section}{\numberline {4.2}Case Study: Private Information Retrieval}{39}{section.4.2}} \@writefile{toc}{\contentsline {subsection}{\numberline {4.2.1}The PIR Project and Policy Assurance}{39}{subsection.4.2.1}} \@writefile{lof}{\contentsline {figure}{\numberline {4-1}{\ignorespaces An overview of the IARPA PIR project. From \cite {iarpa-pir-slides}.}}{40}{figure.4.1}} \newlabel{overview}{{4-1}{40}{The PIR Project and Policy Assurance\relax }{figure.4.1}{}} \@writefile{toc}{\contentsline {section}{\numberline {4.3}Summary}{40}{section.4.3}} \@writefile{toc}{\contentsline {chapter}{\numberline {5}Policy Assurance in RDF: System Overview}{41}{chapter.5}} \@writefile{lof}{\addvspace {10\p@ }} \@writefile{lot}{\addvspace {10\p@ }} \@writefile{toc}{\contentsline {section}{\numberline {5.1}System Components}{41}{section.5.1}} \@writefile{lof}{\contentsline {figure}{\numberline {5-1}{\ignorespaces Architecture of our policy assurance reasoner, demonstrating separation from the RDBMS.}}{42}{figure.5.1}} \newlabel{system-drawing}{{5-1}{42}{System Components\relax }{figure.5.1}{}} \@writefile{toc}{\contentsline {section}{\numberline {5.2}Usage Scenarios}{42}{section.5.2}} \@writefile{toc}{\contentsline {subsection}{\numberline {5.2.1}The Administrator}{42}{subsection.5.2.1}} \@writefile{toc}{\contentsline {subsection}{\numberline {5.2.2}The User}{43}{subsection.5.2.2}} \@writefile{toc}{\contentsline {subsection}{\numberline {5.2.3}The Auditor}{43}{subsection.5.2.3}} \@writefile{toc}{\contentsline {chapter}{\numberline {6}Policy Assurance in RDF: System Detail}{45}{chapter.6}} \@writefile{lof}{\addvspace {10\p@ }} \@writefile{lot}{\addvspace {10\p@ }} \@writefile{toc}{\contentsline {section}{\numberline {6.1}Query Based Security}{45}{section.6.1}} \@writefile{toc}{\contentsline {section}{\numberline {6.2}Designing and Writing Policies}{45}{section.6.2}} \citation{swobjects} \citation{spasql} \@writefile{toc}{\contentsline {subsection}{\numberline {6.2.1}Policies Supported}{46}{subsection.6.2.1}} \@writefile{toc}{\contentsline {subsection}{\numberline {6.2.2}Automatic Policy Generation}{46}{subsection.6.2.2}} \@writefile{toc}{\contentsline {section}{\numberline {6.3}SPARQL to N3 Query Conversion}{46}{section.6.3}} \@writefile{toc}{\contentsline {subsection}{\numberline {6.3.1}Query Conversion Ontology}{46}{subsection.6.3.1}} \@writefile{lot}{\contentsline {table}{\numberline {6.1}{\ignorespaces Query conversion ontology.}}{47}{table.6.1}} \newlabel{q-ont}{{6.1}{47}{Query Conversion Ontology\relax }{table.6.1}{}} \@writefile{lof}{\contentsline {figure}{\numberline {6-1}{\ignorespaces Ontology diagram of the SPARQL translation, courtesy of Yotam Aron.}}{47}{figure.6.1}} \newlabel{abstract-query}{{6-1}{47}{Query Conversion Ontology\relax }{figure.6.1}{}} \citation{sparql} \citation{dawg-test} \@writefile{toc}{\contentsline {subsection}{\numberline {6.3.2}swobjects: Parsing and Serializing}{48}{subsection.6.3.2}} \@writefile{toc}{\contentsline {subsection}{\numberline {6.3.3}SPARQL Language Translation}{48}{subsection.6.3.3}} \@writefile{toc}{\contentsline {subsubsection}{Namespaces and URIs: BASE and PREFIX}{49}{section*.6}} \@writefile{toc}{\contentsline {subsubsection}{Query Identification}{49}{section*.7}} \@writefile{toc}{\contentsline {subsubsection}{SELECT}{49}{section*.8}} \citation{sparql} \@writefile{toc}{\contentsline {subsubsection}{SELECT *}{50}{section*.9}} \@writefile{toc}{\contentsline {subsubsection}{CONSTRUCT}{51}{section*.10}} \citation{sparql} \@writefile{toc}{\contentsline {subsubsection}{ASK}{52}{section*.11}} \@writefile{toc}{\contentsline {subsubsection}{DESCRIBE}{52}{section*.12}} \@writefile{toc}{\contentsline {subsubsection}{Query Modifiers: ORDER BY, LIMIT, OFFSET, DISTINCT, REDUCED}{53}{section*.13}} \@writefile{toc}{\contentsline {subsubsection}{OPTIONAL}{53}{section*.14}} \@writefile{toc}{\contentsline {subsubsection}{UNION}{54}{section*.15}} \@writefile{toc}{\contentsline {subsubsection}{Boolean Functions}{54}{section*.16}} \@writefile{lot}{\contentsline {table}{\numberline {6.2}{\ignorespaces Conversion of Boolean operators. The ``name'' refers to the title of the operator in the translator code. The ``translation'' is what the translator outputs, in the query translation namespace.}}{55}{table.6.2}} \newlabel{bools}{{6.2}{55}{Boolean Functions\relax }{table.6.2}{}} \@writefile{toc}{\contentsline {subsubsection}{Built-in Functions: STR, LANG, LANGMATCHES, DATATYPE, BOUND, sameTERM, isURI, isIRI, isLITERAL, REGEX, true, false}{55}{section*.17}} \@writefile{toc}{\contentsline {subsubsection}{FILTER}{55}{section*.18}} \@writefile{toc}{\contentsline {subsubsection}{GRAPH}{56}{section*.19}} \@writefile{toc}{\contentsline {subsection}{\numberline {6.3.4}Lost in Translation}{57}{subsection.6.3.4}} \@writefile{toc}{\contentsline {subsection}{\numberline {6.3.5}Translator Summary}{58}{subsection.6.3.5}} \@writefile{toc}{\contentsline {section}{\numberline {6.4}User Functionality}{58}{section.6.4}} \@writefile{lof}{\contentsline {figure}{\numberline {6-2}{\ignorespaces A screenshot of the SPARQL to N3 translator prototype. The code that implements this translator is available in the DIG SVN repository.}}{59}{figure.6.2}} \newlabel{translator}{{6-2}{59}{SPARQL to N3 Web Page\relax }{figure.6.2}{}} \@writefile{toc}{\contentsline {subsection}{\numberline {6.4.1}SPARQL to N3 Web Page}{59}{subsection.6.4.1}} \@writefile{toc}{\contentsline {subsection}{\numberline {6.4.2}Database Description}{60}{subsection.6.4.2}} \@writefile{toc}{\contentsline {subsection}{\numberline {6.4.3}Templates for Policy Generation}{60}{subsection.6.4.3}} \@writefile{toc}{\contentsline {subsubsection}{To USE and to RETRIEVE}{60}{section*.20}} \@writefile{toc}{\contentsline {subsubsection}{Restriction}{64}{section*.21}} \@writefile{toc}{\contentsline {subsubsection}{Inclusion}{64}{section*.22}} \@writefile{toc}{\contentsline {subsubsection}{Exclusion}{65}{section*.23}} \@writefile{toc}{\contentsline {subsubsection}{Chaining}{66}{section*.24}} \@writefile{toc}{\contentsline {subsubsection}{Default Deny}{67}{section*.25}} \@writefile{toc}{\contentsline {subsection}{\numberline {6.4.4}Query History with check-compliance}{68}{subsection.6.4.4}} \newlabel{RF1}{{6.4.3}{69}} \@writefile{lot}{\contentsline {table}{\numberline {6.3}{\ignorespaces Automatic policy generation: USE.}}{69}{table.6.3}} \newlabel{translator-table-use}{{6.3}{69}{Default Deny\relax }{table.6.3}{}} \newlabel{RF2}{{6.4.3}{70}} \@writefile{lot}{\contentsline {table}{\numberline {6.4}{\ignorespaces Automatic policy generation: RETRIEVE.}}{70}{table.6.4}} \newlabel{translator-table-retrieve}{{6.4}{70}{Default Deny\relax }{table.6.4}{}} \@writefile{toc}{\contentsline {subsection}{\numberline {6.4.5}Policy Generation User Interface}{71}{subsection.6.4.5}} \@writefile{toc}{\contentsline {subsection}{\numberline {6.4.6}Compliance Testing and Browser Presentation in Tabulator}{71}{subsection.6.4.6}} \@writefile{toc}{\contentsline {section}{\numberline {6.5}Summary}{71}{section.6.5}} \@writefile{lof}{\contentsline {figure}{\numberline {6-3}{\ignorespaces A mockup of the policy generator, courtest of Yotam Aron.}}{72}{figure.6.3}} \newlabel{demo-ui01}{{6-3}{72}{Policy Generation User Interface\relax }{figure.6.3}{}} \@writefile{lof}{\contentsline {figure}{\numberline {6-4}{\ignorespaces Tabulator browser presentation of the MIT Prox Card policy.}}{73}{figure.6.4}} \newlabel{query-ui01}{{6-4}{73}{Compliance Testing and Browser Presentation in Tabulator\relax }{figure.6.4}{}} \@writefile{lof}{\contentsline {figure}{\numberline {6-5}{\ignorespaces Tabulator justification user interface.}}{74}{figure.6.5}} \newlabel{query-ui02}{{6-5}{74}{Compliance Testing and Browser Presentation in Tabulator\relax }{figure.6.5}{}} \@writefile{toc}{\contentsline {chapter}{\numberline {7}Performance}{77}{chapter.7}} \@writefile{lof}{\addvspace {10\p@ }} \@writefile{lot}{\addvspace {10\p@ }} \@writefile{lot}{\contentsline {table}{\numberline {7.1}{\ignorespaces Running time, in seconds, of unoptimized queries.}}{78}{table.7.1}} \newlabel{no-opt}{{7.1}{78}{Performance\relax }{table.7.1}{}} \@writefile{lof}{\contentsline {figure}{\numberline {7-1}{\ignorespaces Unoptimized policy run time from table \ref {no-opt}.}}{79}{figure.7.1}} \newlabel{no-opt-plot}{{7-1}{79}{Performance\relax }{figure.7.1}{}} \@writefile{lot}{\contentsline {table}{\numberline {7.2}{\ignorespaces Running time, in seconds, of optimized queries.}}{79}{table.7.2}} \newlabel{with-opt}{{7.2}{79}{Performance\relax }{table.7.2}{}} \@writefile{lof}{\contentsline {figure}{\numberline {7-2}{\ignorespaces Unoptimized policy run time from table \ref {with-opt}. Note log scale on the X axis.}}{80}{figure.7.2}} \newlabel{with-opt-plot}{{7-2}{80}{Performance\relax }{figure.7.2}{}} \citation{info-account} \citation{rein} \@writefile{toc}{\contentsline {chapter}{\numberline {8}Related and Prior Work}{81}{chapter.8}} \@writefile{lof}{\addvspace {10\p@ }} \@writefile{lot}{\addvspace {10\p@ }} \@writefile{toc}{\contentsline {section}{\numberline {8.1}Policy Awareness}{81}{section.8.1}} \citation{creative-commons} \citation{Oshani:Thesis:2009} \citation{Qiu85trustedcomputer} \@writefile{toc}{\contentsline {section}{\numberline {8.2}Methodologies of Access Control}{82}{section.8.2}} \@writefile{toc}{\contentsline {subsection}{\numberline {8.2.1}Mandatory and Discretionary Access Control}{82}{subsection.8.2.1}} \citation{Qiu85trustedcomputer} \citation{dac-db} \citation{rbac} \@writefile{toc}{\contentsline {subsection}{\numberline {8.2.2}Role Based Access Control}{83}{subsection.8.2.2}} \citation{rein} \citation{rulebased} \citation{mysql} \@writefile{toc}{\contentsline {subsection}{\numberline {8.2.3}Rule- and Policy-Based Access Control}{84}{subsection.8.2.3}} \@writefile{toc}{\contentsline {section}{\numberline {8.3}Prior Work in Relational Databases}{84}{section.8.3}} \@writefile{toc}{\contentsline {subsection}{\numberline {8.3.1}Access Control Lists}{84}{subsection.8.3.1}} \citation{acl-oracle} \citation{oracle} \citation{rbac-commercial} \@writefile{toc}{\contentsline {subsection}{\numberline {8.3.2}Access Control Features In A Modern RDBMS}{85}{subsection.8.3.2}} \citation{demids} \citation{Cathey03misusedetection} \citation{Kamra} \@writefile{toc}{\contentsline {subsection}{\numberline {8.3.3}Misuse and Intrusion Detection}{86}{subsection.8.3.3}} \citation{kanon} \citation{kanon2} \citation{datafly} \@writefile{toc}{\contentsline {section}{\numberline {8.4}Alteration of Data}{87}{section.8.4}} \@writefile{toc}{\contentsline {chapter}{\numberline {9}Future Directions}{89}{chapter.9}} \@writefile{lof}{\addvspace {10\p@ }} \@writefile{lot}{\addvspace {10\p@ }} \@writefile{toc}{\contentsline {section}{\numberline {9.1}SQL Support}{89}{section.9.1}} \citation{fyzz} \@writefile{toc}{\contentsline {section}{\numberline {9.2}Completing and Porting the N3 Translator}{90}{section.9.2}} \@writefile{toc}{\contentsline {section}{\numberline {9.3}Policy Generation from Natural Language}{90}{section.9.3}} \@writefile{toc}{\contentsline {section}{\numberline {9.4}Semantic Policies}{90}{section.9.4}} \@writefile{toc}{\contentsline {chapter}{\numberline {10}Concluding Thoughts}{93}{chapter.10}} \@writefile{lof}{\addvspace {10\p@ }} \@writefile{lot}{\addvspace {10\p@ }} \@setckpt{chapters}{ \setcounter{page}{94} \setcounter{equation}{0} \setcounter{enumi}{5} \setcounter{enumii}{0} \setcounter{enumiii}{0} \setcounter{enumiv}{0} \setcounter{footnote}{0} \setcounter{mpfootnote}{0} \setcounter{part}{0} \setcounter{chapter}{10} \setcounter{section}{0} \setcounter{subsection}{0} \setcounter{subsubsection}{0} \setcounter{paragraph}{0} \setcounter{subparagraph}{0} \setcounter{figure}{0} \setcounter{table}{0} \setcounter{savepage}{3} \setcounter{r@tfl@t}{2} \setcounter{lstlisting}{0} \setcounter{lstnumber}{1} \setcounter{FancyVerbLine}{4} \setcounter{endnote}{8} \setcounter{Item}{5} \setcounter{section@level}{1} }