Dynamic management of data warehouse security levels based on user profiles

Amina El Ouazzani (1) , Sara Rhazlane (2) , Nouria Harbi (2) , Hassan Badir (1)

1 Labtic - Laboratoire des Technologies de l'Information et de la Communication
2 ERIC - Entrepôts, Représentation et Ingénierie des Connaissances

Respect for privacy and data confidentiality in a company are two fundamentals that must be protected. However, a Data Warehouse can be used as a very powerful mechanism for discovering crucial information, hence the importance of implementing security measures which guarantee the data confidentiality by establishing an access control policy. In this direction, several propositions were made, however, none is considered as a standard of access management to data warehouses. In this article, we will present our approach that allows first to exploit the permissions defined in the data sources in order to help the administrator to define access permissions to the data warehouse, and then our system will automatically generate the sensitivity level of each data warehouse element according to the permissions granted to an object in the data warehouse.

Mots clés: Crucial information; Profession profile; Confidentiality; Index Terms-Data Warehouse; Traceability; Crucial information

Domaines: Cryptographie et sécurité [cs.CR]

Amina El Ouazzani, Sara Rhazlane, Nouria Harbi, Hassan Badir. Dynamic management of data warehouse security levels based on user profiles. International Colloquium on Information Science and Technology (CIST 2016), Oct 2016, Tanger, Morocco. ⟨hal-02056168⟩