Jean Yang

Contextual and Granular Policy Enforcement in Database-backed Applications

2020

Database-backed applications rely on inlined policy checks to process users' private and confidential data in a policy-compliant manner as traditional database access control mechanisms cannot enforce complex policies. However, application bugs due to missed checks …