Concurrency control in multilevel-secure databases based on replicated architecture

ABSTRACT

In a multilevel secure database management system based on the replicated architecture, there is a separate database management system to manage data at or below each security level, and lower level data are replicated in all databases containing higher level data. In this paper, we address the open issue of concurrency control in such a system. We give a secure protocol that guarantees one-copy serializability of concurrent transaction executions and can be implemented in such a way that the size of the trusted code (including the code required for concurrency and recovery) is small.

REFERENCES

• 1: "Multilevel Data Management Security," Committee on Multilevel Data Management Security, Air Force Studies Board, Research Council, Washington, DC, 1983
• 2: "Department of Defense Trusted Computer System Evaluation Criteria," Department of Defense, National Computer Security Center, December 1985
• 3: D E Bell and L. J. LaPadula, "Secure computer systems. Unified exposition and multics interpretation," The Mitre Corp., March 1976
• 4: Philip A. Bernstein , Vassco Hadzilacos , Nathan Goodman, Concurrency control and recovery in database systems, Addison-Wesley Longman Publishing Co., Inc., Boston, MA, 1987
• 5: C. J. Date, An introduction to database systems: vol. I (4th ed.), Addison-Wesley Longman Publishing Co., Inc., Boston, MA, 1986
• 6: Dorothy Elizabeth Rob Denning, Cryptography and Data Security, Addison-Wesley Longman Publishing Co., Inc., Boston, MA, 1982
• 7: Dorothy E. Denning, Teresa F Lunt, Roger R. Schell, William R. Shockley, and Mark Heckman, "The SeaView security model," Proc. Symp. on Security and Privacy, pp. 218-233, April 1988
• 8: Judith N Frocher and Catherine Meadows, "Achieving a trusted database management system using parallelism," in Database Security, II. Status and Prospects, ed. Carl E. Landwehr, pp 151-160, North-Holland, Amsterdam, 1989
• 9: Cristi Garvey, Thomas Hinke, Nancy Jensen, Jane Solomon, and Amy Wu, "A layered TCB implementation versus the Hinke-Schaefer approach," Proc. 3rd IFIP WG 113 Workshop on Database Security, September 1989
• 10: Richard Graubart, "A comparison of three secure DBMS architectures," Proc. 3rd IFIP WG 113 Workshop on Database Security, September 1989
• 11: Jim Gray, Notes on Data Base Operating Systems, Operating Systems, An Advanced Course, p.393-481, January 1978
• 12: Jim Gray , Paul McJones , Mike Blasgen , Bruce Lindsay , Raymond Lorie , Tom Price , Franco Putzolu , Irving Traiger, The Recovery Manager of the System R Database Manager, ACM Computing Surveys (CSUR), v.13 n.2, p.223-242, June 1981 [doi>10.1145/356842.356847]
• 13: M. J. Groh, "A model of protected data management system," I P Sharp Assoc. Ltd., June 1976.
• 14: Thomas H. Hinke and Marvin Schaefer, "Secure Database Management System," RADC-TR-75-266, Final Technical Report, System Development Corporation, November 1975
• 15: T. H. Hinke, DBMS technology vs. threats, on Database Security: Status and Prospects, p.57-87, September 1988, Annapolis, Maryland, United States
• 16: Suhil Jajodia and Boris Kogan, "Transaction processing in multilevel-secure databases using replicated architecture," Technical Report, Center of Excellence for Command, Control, Communications, and Intelligence, George Mason University, October 1989.
• 17: Catherine D. Jensen , Robert M. Kiel , Richard D. Verjinski, SDDM - A Prototype of a Distributed Architecture for Database Security, Proceedings of the Fifth International Conference on Data Engineering, p.356-364, February 06-10, 1989
• 18: Boris Kogan and Hector Garcia-Molina.
• 19: Boris Kogan , Hector Garcia-Molina, Update propagation in Bakunin data networks, Proceedings of the sixth annual ACM Symposium on Principles of distributed computing, p.13-26, August 10-12, 1987, Vancouver, British Columbia, Canada [doi>10.1145/41840.41842]
• 20: Butler W. Lampson, A note on the confinement problem, Communications of the ACM, v.16 n.10, p.613-615, Oct. 1973 [doi>10.1145/362375.362389]
• 21: Carl E. Landwehr, Formal Models for Computer Security, ACM Computing Surveys (CSUR), v.13 n.3, p.247-278, Sept. 1981 [doi>10.1145/356850.356852]
• 22: G. H. MacEwen, Effects of distributed system technology on database security: a survey, on Database Security: Status and Prospects, p.253-261, September 1988, Annapolis, Maryland, United States
• 23: James P. O'Connor and James W Gray, III, "A distributed architecture for multilevel database security," Proc. 11th National Computer Security Conference, pp. 179-187, October 1988.
• 24: David P. Reed , Rajendra K. Kanodia, Synchronization with eventcounts and sequencers, Communications of the ACM, v.22 n.2, p.115-123, Feb. 1979 [doi>10.1145/359060.359076]

INDEX TERMS

Primary Classification:
  H. Information Systems
  H.2 DATABASE MANAGEMENT
      H.2.4 Systems
          Subjects: Concurrency

Additional Classification:
  H. Information Systems
  H.2 DATABASE MANAGEMENT
      H.2.0 General
          Subjects: Security, integrity, and protection**
      H.2.4 Systems
          Subjects: Transaction processing

  J. Computer Applications
  J.7 COMPUTERS IN OTHER SYSTEMS
      Subjects: Military

General Terms:
Design, Security