Information flow control in object-oriented systems

IEEE Transactions on Knowledge and Data Engineering

Volumn 9, Issue 4, 1997, Pages 524-538

  Samarati, Pierangela ^a,b   Bertino, Elisa ^a,b   Ciampichetti, Alessandro ^b   Jajodia, Sushil ^a,c  

^a University of Milano ^*

^b UNIVERSITY OF MILAN   (Italy)

^c George Mason University   (Italy)

Author keywords

Discretionary access control; Distributed processing; Mandatory access control; Object oriented databases and systems; Security; Trojan horse

Indexed keywords

ALGORITHMS; COMPUTER VIRUSES; DATA HANDLING; ERROR CORRECTION; INFORMATION MANAGEMENT; OBJECT ORIENTED PROGRAMMING; SECURITY OF DATA;

DISCRETIONARY ACCESS CONTROL; INFORMATION FLOW CONTROL; MANDATORY ACCESS CONTROL; TROJAN HORSE VIRUS;

DISTRIBUTED DATABASE SYSTEMS;

EID: 0031185890     PISSN: 10414347     EISSN: None     Source Type: Journal    
DOI: 10.1109/69.617048     Document Type: Article

References (17)

1. D.E. Bell and L.J. LaPadula, "Secure Computer Systems: Unified Exposition and Multics Interpretation," technical report, Mitre Corp., Mar. 1976.
2. H.W. Bingham, "Access Controls in Burroughs Large Systems," Technical Report 404, Privacy and Security in Computer Systems, Nat'l Bureau of Standard Special Publication, 1974.
3. W.E. Boebert and C.T. Ferguson, "A Partial Solution to the Discretionary Trojan Horse Problem," Proc. Eighth Nat'l Computer Security Conf., pp. 141-144, Gaithersburg, Md., 1985.
4. S. Castano, M.G. Fugini, G. Martella, and P. Samarati, Database Security, Addison-Wesley, 1995.
5. R.G.G. Cattell, Object Data Management, Addison-Wesley, 1994.
6. D.E. Denning, "A Lattice Model of Secure Information Flow," Comm. ACM, pp. 236-243, May 1976.
7. R. Graubart, "On the Need for a Third Form of Access Control," Proc. 12th Nat'l Computer Security Conf., pp. 296-303, Gaithersburg, Md., 1989.
8. S. Jajodia and B. Kogan, "Integrating an Object-Oriented Data Model with Multilevel Security," Proc. IEEE Symp. Security and Privacy, pp. 76-85, Oakland, Calif., 1990.
9. M.H. Kang and I.S. Moskowitz, "A Pump for Rapid, Reliable, Secure Communication," Proc. ACM Conf. Computer and Comm. Security, pp. 119-129, Fairfax, Va., 1993.
10. P.A. Karger, "Limiting the Damage Potential of Discretionary Trojan Horses," Proc. IEEE Symp. Security and Privacy, pp. 32-37, Oakland, Calif., 1987.
11. U. Kelter, "Discretionary Access Controls in a High-Performance Object Management System," Proc. IEEE Symp. Security and Privacy, pp. 288-299, Oakland, Calif., 1991.
12. F. Manola and G. Mitchell, "A Comparison of Object Models in ODBMS-Related Standards," IEEE Data Eng. Bull., vol. 17, pp. 27-35, Dec. 1994.
13. C.J. McCollum, J.R. Messing, and L. Notargiacomo, "Beyond the Pale of MAC and DAC - Defining New Forms of Access Control," Proc. IEEE Symp. Security and Privacy, pp. 190-200, Oakland, Calif., 1990.
14. R.S. Sandhu, R. Thomas, and S. Jajodia, "Supporting Timing Channel Free Computations in Multilevel Secure Object-Oriented Databases," C.E. Landwehr and S. Jajodia, eds., Database Security, V: Status and Prospects, pp. 297-314, North-Holland, 1992.
15. A. Stoughton, "Access Flow: A Protection Model which Integrates Access Control and Information Flow," Proc. IEEE Symp. Security and Privacy, pp. 9-18, Oakland, Calif., 1981.
16. K.G. Walter, W.F. Ogden, W.C. Rounds, F.T. Bradshaw, S.R. Ames, and D.G. Sumaway, "Primitive Models for Computer Security, Technical Report ESD-TR-4-117, Case Western Reserve Univ., Cleveland, Jan. 1974.
17. A.L. Wilkinson, D.H. Anderson, D.P. Chang, L.H. Hin, A.J. Mayo, IT. Viney, R. Williams, and W. Wright, "A Penetration Analysis of a Burroughs Large System," ACM SIGOPS Operation System Revs., vol. 15, no. 1, pp. 14-25, Jan. 1981.