Multiverse databases for secure web applications
Thesis: M. Eng., Massachusetts Institute of Technology, Department of Electrical Engineering and Computer Science, 2018.
| Main Author: | |
|---|---|
| Other Authors: | |
| Format: | Thesis |
| Language: | eng |
| Published: |
Massachusetts Institute of Technology
2018
|
| Subjects: | |
| Online Access: | http://hdl.handle.net/1721.1/119542 |
| _version_ | 1826189970444910592 |
|---|---|
| author | Araújo, Lara Timbó |
| author2 | Malte Schwarzkopf and Frans Kaashoek. |
| author_facet | Malte Schwarzkopf and Frans Kaashoek. Araújo, Lara Timbó |
| author_sort | Araújo, Lara Timbó |
| collection | MIT |
| description | Thesis: M. Eng., Massachusetts Institute of Technology, Department of Electrical Engineering and Computer Science, 2018. |
| first_indexed | 2024-09-23T08:33:01Z |
| format | Thesis |
| id | mit-1721.1/119542 |
| institution | Massachusetts Institute of Technology |
| language | eng |
| last_indexed | 2024-09-23T08:33:01Z |
| publishDate | 2018 |
| publisher | Massachusetts Institute of Technology |
| record_format | dspace |
| spelling | mit-1721.1/1195422019-04-09T18:25:17Z Multiverse databases for secure web applications Araújo, Lara Timbó Malte Schwarzkopf and Frans Kaashoek. Massachusetts Institute of Technology. Department of Electrical Engineering and Computer Science. Massachusetts Institute of Technology. Department of Electrical Engineering and Computer Science. Electrical Engineering and Computer Science. Thesis: M. Eng., Massachusetts Institute of Technology, Department of Electrical Engineering and Computer Science, 2018. This electronic version was submitted by the student author. The certified thesis is available in the Institute Archives and Special Collections. Cataloged from student-submitted PDF version of thesis. Includes bibliographical references (pages 57-58). Most modern web applications authenticate users and enforce security policies in the application logic. Therefore, buggy applications can easily leak sensitive data. MultiverseDB addresses this problem in a new database architecture, where each user has her own private view of the database and declarative security policies restrict data-flow into a user's private universe. To support multi-user universes, MultiverseDB builds on ideas of streaming data-flow systems and low-overhead materialized views. When a new user session starts, the system creates data-flow nodes to support the user queries and automatically inserts special nodes to enforce security policies at universe boundaries. MultiverseDB provides fast reads by storing the pre-computed results of user queries with policies already applied in incrementally maintained materialized views. To reduce space overheads created by these views and avoid redundant processing, MultiverseDB reuses views and allows system administrators to specify security groups for users subjected to the same security policies. by Lara Timbó Araújo. M. Eng. 2018-12-11T20:39:26Z 2018-12-11T20:39:26Z 2018 2018 Thesis http://hdl.handle.net/1721.1/119542 1076272390 eng MIT theses are protected by copyright. They may be viewed, downloaded, or printed from this source but further reproduction or distribution in any format is prohibited without written permission. http://dspace.mit.edu/handle/1721.1/7582 58 pages application/pdf Massachusetts Institute of Technology |
| spellingShingle | Electrical Engineering and Computer Science. Araújo, Lara Timbó Multiverse databases for secure web applications |
| title | Multiverse databases for secure web applications |
| title_full | Multiverse databases for secure web applications |
| title_fullStr | Multiverse databases for secure web applications |
| title_full_unstemmed | Multiverse databases for secure web applications |
| title_short | Multiverse databases for secure web applications |
| title_sort | multiverse databases for secure web applications |
| topic | Electrical Engineering and Computer Science. |
| url | http://hdl.handle.net/1721.1/119542 |
| work_keys_str_mv | AT araujolaratimbo multiversedatabasesforsecurewebapplications |