DEVELOPMENT OF A DATABASE SECURITY POLICY METADATA MODEL AND ITS APPLICATION
Dilek Tapucu Arpaçay, Murat Osman Ünalır · DergiPark (Istanbul University) · 2004
Data stored in the database must be protected by pre-defined security policies designed for systems. The security policies must be described with the worth of knowledge and related risks. In this paper, two different security policies are explained by "Generally Accepted System Security Principles". For these policies metadata and metamodels are created and related metamodels are applied by using XML Schema. Then, the structures of elements for each model are exposed. For the realized application, determination of the policy in the organization, for changing conditions rearrangement will be easy. Thus, with the changes made in the metamodels, related policies will be continues in the process and metamodels are moved between different systems.