An effective access control mechanism and multilevel security for multilevel secure databases
Kohler, Matthew J.
Stroud, Shawn W.
Hsiao, David K.
MetadataShow full item record
Security mechanisms on contemporary database systems typically inhibit system performance. However, without security, the database system which stores classified data of different classifications, will pass through classified data of different levels in order to find the properly classified data. This 'pass through 1 inhibits performance (i.e., reduces access precision) because unnecessary material has been retrieved which does not aid in the resolution of the guery. Further, the pass-through issue also breaches the security, since the system may pass through higher classified data for the purpose of locating the lower classified one. This thesis shows for the first time, our Query Modification and Multilevel Security approach to database security, implemented into a single database system, i.e., the Multi-Backend, Multi-Lingual, Multi-Model Database System. These security mechanisms, unlike those seen on contemporary database systems, enhance system performance while simultaneously providing a higher degree of security without the pass-through problem.
Approved for public release; distribution is unlimited
Showing items related by title, author, creator and subject.
Mandatory security policy enforcement in commercial off the shelf database management system software : a comparative analysis of Informix-Online/Secure and trusted ORACLE Muschalek, Keith Edward (Monterey, California. Naval Postgraduate School, 1994-09);The objective of this thesis is to analyze the mandatory access control (MAC) features of two commercial multilevel trusted database management systems (DBMS): Trusted ORACLE 7 and Informix-OnLine/Secure 5.0. We are ...
Ong, Kar Leong; Nguyen, Thuy D.; Irvine, Cynthia E. (International Conference on Information Warfare and Security (ICIW 2008), 2008-04-01);The pace of modern warfare requires tools that support intensive, ongoing collaboration between participants. Wiki technology provides a hypertext content-based collaborative authoring and information sharing environment ...
Hoppenstand, Gregory S. (Monterey, California. Naval Postgraduate School, 1988-03);When classified data of different classifications are stored in a database, it is necessary for a contemporary database system to pass through other classified data to find the properly classified data. Although the user ...