Secure, dynamic and distributed access control stack for database applications

In database applications, access control security layers are mostly developed from tools provided by vendors of database management systems and deployed in the same servers containing the data to be protected. This solution conveys several drawbacks. Among them we emphasize: 1) if policies are complex, their enforcement can lead to performance decay of database servers; 2) when modifications in the established policies implies modifications in the business logic (usually deployed at the client-side), there is no other possibility than modify the business logic in advance and, finally, 3) malicious users can issue CRUD expressions systematically against the DBMS expecting to identify any security gap. In order to overcome these drawbacks, in this paper we propose an access control stack characterized by: most of the mechanisms are deployed at the client-side; whenever security policies evolve, the security mechanisms are automatically updated at runtime and, finally, client-side applications do not handle CRUD expressions directly. We also present an implementation of the proposed stack to prove its feasibility. This paper presents a new approach to enforce access control in database applications, this way expecting to contribute positively to the state of the art in the field.

Secure, dynamic and distributed access control stack for database applications

In database applications, access control security layers are mostly developed from tools provided by vendors of database management systems and deployed in the same servers containing the data to be protected. This solution conveys several drawbacks. Among them we emphasize: (1) if policies are complex, their enforcement can lead to performance decay of database servers; (2) when modifications in the established policies implies modifications in the business logic (usually deployed at the client-side), there is no other possibility than modify the business logic in advance and, finally, 3) malicious users can issue CRUD expressions systematically against the DBMS expecting to identify any security gap. In order to overcome these drawbacks, in this paper we propose an access control stack characterized by: most of the mechanisms are deployed at the client-side; whenever security policies evolve, the security mechanisms are automatically updated at runtime and, finally, client-side applications do not handle CRUD expressions directly. We also present an implementation of the proposed stack to prove its feasibility. This paper presents a new approach to enforce access control in database applications, this way expecting to contribute positively to the state of the art in the field.

Electrolytic cells for plastic waste recycling

The current project assesses potential molten alloy anodes for Solid Oxide Fuel Cells (SOFC) running on solid waste. A detailed phase diagram study was performed to locate probable anode systems. The molten metal oxide system PbO-Sb2O3 was selected as a possible molten alloy anode for this application. A detailed vapour pressure study of this system was performed. Several cells were fabricated to experimentally assess the electrochemical properties of this system. The work reveals several unexpected limiting features such as the incompatibility between the platinum and the chosen alloy. A second cell was built, this time using rhenium wires instead, preventing such reaction. However, the rhenium wire sublimes under oxidizing conditions (air) and the sealing glass and the chosen alloy system react with each other under long term use. Considering all these issues, a third cell design was conceived, surpassing some obstacles and providing some initial information regarding the electrochemical behaviour. The current project shows that many parameters need to be taken into account to ensure materials compatibility. For the PbOSb2O3 system, the high volatility of Sb2O3 was a serious limitation that can only be addressed through the application of new contact wires or sealing materials and conditions. Nonetheless, the project highlights several other potential systems that can be considered, such as Pb11Ge3O17, Pb3GeO5, Pb5Ge3O11, Bi2CuO4, Bi2PdO4, Bi12GeO20.