Metadata-Driven Information Security Model for Enterprise Content Management

This thesis focuses on the topic of defining how a metadata-driven security model can provide an organization with the ability to dynamically manage information security for enterprise content management systems, through the use of attribute-based access controls. This thesis will cover a range of topics, such as information management, information security concepts, information taxonomy, metadata, access control, and identity management. We will review a conceptual design on the technical aspect of this model, along with studying the historical attempts and outcomes. At the end of this thesis, we will demonstrate the value of implementing a metadata-driven security model, and specifically how it can be implemented for enterprise content management.