Closing the key loophole in MLS databases

ABSTRACT

There has been an abundance of research within the last couple of decades in the area of multilevel secure (MLS) databases. Recent work in this field deals with the processing of multilevel transactions, expanding the logic of MLS query languages, and utilizing MLS principles within the realm of E-Business. However, there is a basic flaw within the MLS logic, which obstructs the handling of clearance-invariant aggregate queries and physical-entity related queries where some of the information in the database may be gleaned from the outside world. This flaw stands in the way of a more pervasive adoption of MLS models by the developers of practical applications. This paper clearly identifies the cause of this impediment -- the cover story dependence on the value of a user-defined key -- and proposes a practical solution.

REFERENCES

• 1: Vijayalakshmi Atluri , Sushil Jajodia , Elisa Bertino, Transaction Processing in Multilevel Secure Databases with Kernelized Architecture: Challenges and Solutions, IEEE Transactions on Knowledge and Data Engineering, v.9 n.5, p.697-708, September 1997 [doi>10.1109/69.634749]
• 2: D. E. Bell and L. J. LaPadula, "Secure Computer Systems: Mathematical Foundations and Model," Technical Report, MITRE Corporation, 1974.
• 3: D. E. Denning, "The Sea View Security Model", Proceedings: IEEE Symposium on Security and Privacy, Oakland, California, pp. 218--233, 1988.
• 4: Thomas D. Garvey , Teresa F. Lunt, Cover Stories for Database Security, Results of the IFIP WG 11.3 Workshop on Database Security V: Status and Prospects, p.363-380, November 01, 1991
• 5: J. T. Haigh, R. C. O'Brien, and D. J. Thomasen "The LDV Secure Relational DBMS Model," Database Security IV: Status and Prospects, edited by S. Jajodia and C. E. Landwehr, North-Holland, pp. 265--279, 1991.
• 6: Hasan M. Jamil, Belief reasoning in MLS deductive databases, Proceedings of the 1999 ACM SIGMOD international conference on Management of data, p.109-120, May 31-June 03, 1999, Philadelphia, Pennsylvania, United States
• 7: S. Jajodia, and R. Sandhu, "Polyinstantiation Integrity in Multilevel Relations," Proceedings: IEEE Symposium on Security and Privacy, Oakland, California, pp. 104--115, 1990.
• 8: Sushil Jajodia , Ravi Sandhu, Toward a multilevel secure relational data model, Proceedings of the 1991 ACM SIGMOD international conference on Management of data, p.50-59, May 29-31, 1991, Denver, Colorado, United States
• 9: B. Jukic, N. Jukic, L. Meamber, and G. Nezlek, "Implementing Polyinstantiation as a Strategy for Electronic Commerce Customer Relationship Management," International Journal of Electronic Commerce, Vol. 7, No. 2, pp. 9--30, 2003.
• 10: Nenad A. Jukic , Susan V. Vrbsky, Asserting beliefs in MLS relational models, ACM SIGMOD Record, v.26 n.3, p.30-35, Sept. 1997 [doi>10.1145/262762.262767]
• 11: N. Jukic, Vrbsky S., Parrish A., Dixon B., and Jukic B. "A Belief-Consistent Multilevel Secure Relational Data Model", Information Systems, Vol. 24, No. 5, pp. 377--402, 1999
• 12: Teresa F. Lunt, Research Directions in Database Security, Springer-Verlag New York, Inc., Secaucus, NJ, 1992
• 13: S. Nestorov and N. Jukic, "Implementing SEID as a Solution for Connecting NKCS", The University of Chicago, Computer Science Department, Technical Report TR-2003-03, 2003
• 14: Ravi Sandhu , Fang Chen, The multilevel relational (MLR) data model, ACM Transactions on Information and System Security (TISSEC), v.1 n.1, p.93-132, Nov. 1998 [doi>10.1145/290163.290171]
• 15: Ravi S. Sandhu , Sushil Jajodia, Polyinstantation for Cover Stories, Proceedings of the Second European Symposium on Research in Computer Security, p.307-328, November 23-25, 1992
• 16: Kenneth Smith , Marianne Winslett, Entity Modeling in the MLS Relational Model, Proceedings of the 18th International Conference on Very Large Data Bases, p.199-210, August 23-27, 1992
• 17: Kenneth P. Smith , Barbara T. Blaustein , Sushil Jajodia , LouAnna Notargiacomo, Correctness Criteria for Multilevel Secure Transactions, IEEE Transactions on Knowledge and Data Engineering, v.8 n.1, p.32-45, February 1996 [doi>10.1109/69.485627]