Multiversion concurrency control for multilevel secure database systems

Consideration is given to the application of multiversion schedulers in multilevel secure database management systems (MLS/DBMSs). Transactions are vital for MLS/DBMSs because they provide transparency to concurrency and failure. Concurrent execution of transactions may lead to contention among subjects for access to data, which in MLS/DBMSs may lead to security problems. Multiversion schedulers reduce the contention for access to data by maintaining multiple versions. A description is given of the relation between schedules produced in MLS/DBMSs and those which are multiversion serializable. The authors also propose a secure multiversion scheduler. They show that the scheduling protocol gives correct schedules and is free of covert channels due to contention for access to data, i.e. the scheduler is data-conflict-secure.<<ETX>>

[1]  José Meseguer,et al.  Unwinding and Inference Control , 1984, 1984 IEEE Symposium on Security and Privacy.

[2]  Bhavani M. Thuraisingham,et al.  SODA: A secure object-oriented database system , 1989, Comput. Secur..

[3]  Sushil Jajodia,et al.  Transaction processing in multilevel-secure databases using replicated architecture , 1990, Proceedings. 1990 IEEE Computer Society Symposium on Research in Security and Privacy.

[4]  J. Thomas Haigh,et al.  Extending theNoninterference Versionof MLS , 1987 .

[5]  Teresa F. Lunt,et al.  Issues in distributed database security , 1989, [1989 Proceedings] Fifth Annual Computer Security Applications Conference.

[6]  J. Meseguer,et al.  Security Policies and Security Models , 1982, 1982 IEEE Symposium on Security and Privacy.

[7]  Gordon Smith,et al.  TCB subsets: the next step , 1989, [1989 Proceedings] Fifth Annual Computer Security Applications Conference.

[8]  J. T. Robinson,et al.  On optimistic methods for concurrency control , 1979, TODS.

[9]  Dan Thomsen,et al.  Multi-party update conflict: The problem and its solutions , 1989 .

[10]  D. Elliott Bell,et al.  Secure Computer System: Unified Exposition and Multics Interpretation , 1976 .

[11]  Christos H. Papadimitriou,et al.  The Theory of Database Concurrency Control , 1986 .