Full protection specifications in the semantic model for database protection languages

ABSTRACT

The basic model of semantics for protection languages is reviewed. Advanced protection features are introduced into the model and their impact on authorization and enforcement is discussed. History keeping allows access dependency upon the occurrence of previous data operations. Auxiliary program invocation provides for additional (procedural) protection measures. Extended authorization permits a user to utilize, via authorized procedures, data which are not directly accessible by him. Examples are used to explain each of these features. The enforcement process for full specifications is illustrated with an example.

REFERENCES

• 1: R.F. Boyce, et al., Specifying queries as relational expressions, ACM-SIGPLAN Notices, vol.10, no. 1, January 1975.
• 2: CODASYL Database Task Group, Report to the Programming Language Committee, rev. April 1971.
• 3: Arthur Evans, Jr. , Edwin Weiss, A user authentication scheme not requiring secrecy in the computer, Communications of the ACM, v.17 n.8, p.437-442, Aug. 1974 [doi>10.1145/361082.361087]
• 4: Donald I. Good, Provable programming, Proceedings of the international conference on Reliable software, p.411-419, April 21-23, 1975, Los Angeles, California
• 5: H. Rex Hartson , David K. Hsiao, A Semantic Model for Data Base Protection Languages, Systems for Large Data Bases, p.27-42, September 08-10, 1976
• 6: Lance J. Hoffman, The formulary model for flexible privacy and access control, Proceedings FJCC, vol. 39, 1971, 587-601.
• 7: L. J. Hoffman and William F. Miller, Getting a personal dossier from a statistical data bank, reprinted in Security and Privacy in Computer Systems, Melville Pub. Co., Los Angeles, 1973, 289-293.
• 8: Anita Katherine Jones, Protection in programmed systems., 1973
• 9: Butler W. Lampson, A note on the confinement problem, Communications of the ACM, v.16 n.10, p.613-615, Oct. 1973 [doi>10.1145/362375.362389]
• 10: H. E. Petersen and R. Turn, System implications on information privacy, Proceedings of SJCC, vol. 30, 1967, 291-300.
• 11: Gerald J. Popek , Charles S. Kline, A verifiable protection system, Proceedings of the international conference on Reliable software, p.294-304, April 21-23, 1975, Los Angeles, California
• 12: George B. Purdy, A high security log-in procedure, Communications of the ACM, v.17 n.8, p.442-445, Aug. 1974 [doi>10.1145/361082.361089]

INDEX TERMS

Primary Classification:
  H. Information Systems
  H.2 DATABASE MANAGEMENT
      H.2.7 Database Administration
          Subjects: Security, integrity, and protection

Additional Classification:
  H. Information Systems
  H.2 DATABASE MANAGEMENT

General Terms:
Management, Security, Theory