\BOOKMARK [0][-]{chapter.1}{Introduction}{} \BOOKMARK [1][-]{section.1.1}{Motivating Example}{chapter.1} \BOOKMARK [2][-]{subsection.1.1.1}{Sample Usage Scenario}{section.1.1} \BOOKMARK [1][-]{section.1.2}{System Components}{chapter.1} \BOOKMARK [1][-]{section.1.3}{Outline}{chapter.1} \BOOKMARK [0][-]{chapter.2}{Policy Assurance}{} \BOOKMARK [1][-]{section.2.1}{Introduction to Policy Assurance}{chapter.2} \BOOKMARK [1][-]{section.2.2}{User Roles and Perspectives}{chapter.2} \BOOKMARK [2][-]{subsection.2.2.1}{The Administrator}{section.2.2} \BOOKMARK [2][-]{subsection.2.2.2}{The User}{section.2.2} \BOOKMARK [2][-]{subsection.2.2.3}{The Auditor}{section.2.2} \BOOKMARK [1][-]{section.2.3}{Modes of Operation}{chapter.2} \BOOKMARK [1][-]{section.2.4}{Demonstration}{chapter.2} \BOOKMARK [2][-]{subsection.2.4.1}{Describing a Free-Text Policy}{section.2.4} \BOOKMARK [2][-]{subsection.2.4.2}{Checking a Compliant Query}{section.2.4} \BOOKMARK [2][-]{subsection.2.4.3}{Checking an Incompliant Query}{section.2.4} \BOOKMARK [2][-]{subsection.2.4.4}{Demo Notes}{section.2.4} \BOOKMARK [1][-]{section.2.5}{Summary}{chapter.2} \BOOKMARK [0][-]{chapter.3}{System Detail}{} \BOOKMARK [1][-]{section.3.1}{SPARQL Query Translation}{chapter.3} \BOOKMARK [2][-]{subsection.3.1.1}{SPARQL to N3 Web Page}{section.3.1} \BOOKMARK [2][-]{subsection.3.1.2}{Query Conversion Ontology}{section.3.1} \BOOKMARK [2][-]{subsection.3.1.3}{swobjects: Parsing and Serializing}{section.3.1} \BOOKMARK [2][-]{subsection.3.1.4}{SPARQL Language Translation}{section.3.1} \BOOKMARK [2][-]{subsection.3.1.5}{Lost in Translation}{section.3.1} \BOOKMARK [2][-]{subsection.3.1.6}{Translator Summary}{section.3.1} \BOOKMARK [1][-]{section.3.2}{AIR Policy Generation}{chapter.3} \BOOKMARK [2][-]{subsection.3.2.1}{Templates for Policy Generation}{section.3.2} \BOOKMARK [2][-]{subsection.3.2.2}{Supported Policy Types}{section.3.2} \BOOKMARK [2][-]{subsection.3.2.3}{Automatic Policy Generation}{section.3.2} \BOOKMARK [2][-]{subsection.3.2.4}{Query History with check-compliance}{section.3.2} \BOOKMARK [2][-]{subsection.3.2.5}{Policy Generation User Interface}{section.3.2} \BOOKMARK [2][-]{subsection.3.2.6}{Compliance Testing and Browser Presentation in Tabulator}{section.3.2} \BOOKMARK [2][-]{subsection.3.2.7}{Implementation Note}{section.3.2} \BOOKMARK [1][-]{section.3.3}{Summary}{chapter.3} \BOOKMARK [0][-]{chapter.4}{Performance}{} \BOOKMARK [0][-]{chapter.5}{Related and Prior Work}{} \BOOKMARK [1][-]{section.5.1}{Policy Awareness}{chapter.5} \BOOKMARK [1][-]{section.5.2}{Methodologies of Access Control}{chapter.5} \BOOKMARK [2][-]{subsection.5.2.1}{Mandatory and Discretionary Access Control}{section.5.2} \BOOKMARK [2][-]{subsection.5.2.2}{Role Based Access Control}{section.5.2} \BOOKMARK [2][-]{subsection.5.2.3}{Rule- and Policy-Based Access Control}{section.5.2} \BOOKMARK [1][-]{section.5.3}{Prior Work in Relational Databases}{chapter.5} \BOOKMARK [2][-]{subsection.5.3.1}{Access Control Lists}{section.5.3} \BOOKMARK [2][-]{subsection.5.3.2}{Access Control Features In A Modern RDBMS}{section.5.3} \BOOKMARK [2][-]{subsection.5.3.3}{Misuse and Intrusion Detection}{section.5.3} \BOOKMARK [1][-]{section.5.4}{Alteration of Data}{chapter.5} \BOOKMARK [0][-]{chapter.6}{Future Directions}{} \BOOKMARK [1][-]{section.6.1}{SPARQL Endpoint Integration}{chapter.6} \BOOKMARK [1][-]{section.6.2}{SQL Support}{chapter.6} \BOOKMARK [1][-]{section.6.3}{Completing and Porting the N3 Translator}{chapter.6} \BOOKMARK [1][-]{section.6.4}{Policy Generation from Natural Language}{chapter.6} \BOOKMARK [1][-]{section.6.5}{Semantic Policies}{chapter.6} \BOOKMARK [1][-]{section.6.6}{Database Description}{chapter.6} \BOOKMARK [0][-]{chapter.7}{Concluding Thoughts}{} \BOOKMARK [0][-]{appendix.A}{Background Technologies}{} \BOOKMARK [1][-]{section.A.1}{Semantic Web Overview}{appendix.A} \BOOKMARK [2][-]{subsection.A.1.1}{The Vision}{section.A.1} \BOOKMARK [2][-]{subsection.A.1.2}{The URI}{section.A.1} \BOOKMARK [2][-]{subsection.A.1.3}{HTML, the HyperText Markup Language, and XML, the eXtensible Markup Language}{section.A.1} \BOOKMARK [1][-]{section.A.2}{RDF}{appendix.A} \BOOKMARK [2][-]{subsection.A.2.1}{Notation 3}{section.A.2} \BOOKMARK [1][-]{section.A.3}{OWL}{appendix.A} \BOOKMARK [1][-]{section.A.4}{Tabulator}{appendix.A} \BOOKMARK [1][-]{section.A.5}{SPARQL}{appendix.A} \BOOKMARK [1][-]{section.A.6}{Reasoning}{appendix.A} \BOOKMARK [2][-]{subsection.A.6.1}{Forward Chaining}{section.A.6} \BOOKMARK [2][-]{subsection.A.6.2}{Production Rule Systems}{section.A.6} \BOOKMARK [2][-]{subsection.A.6.3}{The Rete Algorithm}{section.A.6} \BOOKMARK [2][-]{subsection.A.6.4}{Semantic Web Application Platform}{section.A.6} \BOOKMARK [2][-]{subsection.A.6.5}{cwm and cwmrete}{section.A.6} \BOOKMARK [1][-]{section.A.7}{AIR}{appendix.A} \BOOKMARK [2][-]{subsection.A.7.1}{Introduction}{section.A.7} \BOOKMARK [2][-]{subsection.A.7.2}{A Brief AIR Tutorial}{section.A.7} \BOOKMARK [2][-]{subsection.A.7.3}{Changes to the AIR language}{section.A.7} \BOOKMARK [2][-]{subsection.A.7.4}{AIR Summary}{section.A.7} \BOOKMARK [1][-]{section.A.8}{Summary}{appendix.A} \BOOKMARK [0][-]{appendix.B}{Supporting Code}{} \BOOKMARK [1][-]{section.B.1}{MIT Prox Card Policy}{appendix.B} \BOOKMARK [1][-]{section.B.2}{SSN Policy - Original Ontology}{appendix.B} \BOOKMARK [1][-]{section.B.3}{SSN Policy - Current Ontology}{appendix.B} \BOOKMARK [1][-]{section.B.4}{A sample SPARQL Query}{appendix.B} \BOOKMARK [1][-]{section.B.5}{Abstract SPARQL to N3 Ontology}{appendix.B} \BOOKMARK [1][-]{section.B.6}{Sample Restriction Policy}{appendix.B} \BOOKMARK [1][-]{section.B.7}{Sample Inclusion Policy}{appendix.B} \BOOKMARK [1][-]{section.B.8}{Sample Exclusion Policy}{appendix.B} \BOOKMARK [1][-]{section.B.9}{Sample History-Aware Exclusion Policy}{appendix.B} \BOOKMARK [1][-]{section.B.10}{Sample Chaining Policy}{appendix.B} \BOOKMARK [1][-]{section.B.11}{Sample Default Deny Policy}{appendix.B} \BOOKMARK [1][-]{section.B.12}{No-Address Restriction Policy for Sample Scenario}{appendix.B}