On the implementation of security measures in information systems

ABSTRACT

The security of an information system may be represented by a model matrix whose elements are decision rules and whose row and column indices are users and data items respectively. A set of four functions is used to access this matrix at translation and execution time. Distinguishing between data dependent and data independent decision rules enables one to perform much of the checking of security only once at translation time rather than repeatedly at execution time. The model is used to explain security features of several existing systems, and serves as a framework for a proposal for general security system implementation within today's languages and operating systems.

REFERENCES

• 1: Allen, Brandt. Danger ahead Safeguard your computer. Harvard Bus. Rev. (Nov.-Dec. 1968), 97-101.
• 2: ASAP Syst. Ref. Man. Compuvisor, Inc., 1971.
• 3: Baran, Paul. On distributed communications: IX. Security, secrecy, and tamper-free considerations. Doc. RM-3765-PR, Rand Corp., Santa Monica, Calif., Aug. 1964.
• 4: Bingham, H.W. Security techniques for EDP of multilevel classified information. Doc. RADC-TR-65-415, Rome Air Dev. Cent., Rome, N.Y., Dec. 1965 (unclassified).
• 5: Carrol, J.M., and McLelland, P.M. Fast infinite key privacy transformation for resource sharing systems. Proc. AFIPS 1970 FJCC, Vol. 36, AFIPS Press, Montvale, N.J., pp. 223-230.
• 6: CODASYL Data Base Task Group Report. Rev. Apr. 1971 (available ACM Headquarters).
• 7: CODASYL Systems Committee. A survey of generalized data base management systems. May 1969 (available ACM Headquarters).
• 8: CORPORATE Codasyl Systems Committee, Introduction to “feature analysis of generalized data base management systems”, Communications of the ACM, v.14 n.5, p.308-318, May 1971 [doi>10.1145/362588.362590]
• 9: Conway, R.W., Maxwell, W.L., and Morgan, H.L. Selective ecurity capabilities in ASAP--A file management system. Proc. AFIPS 1972 SJCC (to appear).
• 10: Conway, R.W., Morgan, H.L., Wagner, R., and Wilcox, T. User's guide to PL/C. Dept. of Comput. Sci., Cornell U., Ithiea, N.Y., 1970.
• 11: Robert M. Graham, Protection in an information processing utility, Communications of the ACM, v.11 n.5, p.365-369, May 1968 [doi>10.1145/363095.363146]
• 12: Lance J. Hoffman, Computers and Privacy: A Survey, ACM Computing Surveys (CSUR), v.1 n.2, p.85-103, June 1969 [doi>10.1145/356546.356548]
• 13: Hoffman, Lance J. The formulary model for access control and privacy in computer systems. SLAC Rep. No. 117., Stanford U., Calif., May 1970.
• 14: Martin, James, and Norman, A. The Computerized Society. Prentice-Hall, Englewood Cliffs, N.J., 1970.
• 15: Miller, A.R. Assault on Privacy: Computers, Data Banks, and Dossiers. U. of Michigan Press, Ann Arbor, Mich., 1971.
• 16: MTS User's Guide. U. of Michigan Comput. Cent., Ann Arbor, Mich., 1970.
• 17: Petersen, H.E., and Turn, R. System implications of information privacy. Proc. AFIPS 1967 SJCC Vol. 30, AFIPS Press, Montvale, N.J., pp. 291-300.
• 18: Skatrud, R.O. The applications of cryptographic techniques to data processing. Proc. AFIPS 1969 FJCC Vol. 34, AFIPS Press, Montvale, N.J., pp. 111-117.
• 19: Westin, A. Privacy and Freedom. Atheneum, New York, 1967.

INDEX TERMS

Keywords:
access control confidentiality, access management, data banks, management information systems, operating systems, privacy, security