Enhancing database access control by facilitating non-key related cover stories

Journal of Database Management

Volumn 16, Issue 3, 2005, Pages 1-20

  Jukic, Nenad ^a   Nestorov, Svetlozar ^b,d   Vrbsky, Susan V ^c   Parrish, Allen ^c  

^a LOYOLA UNIVERSITY CHICAGO   (United States)

^b UNIVERSITY OF CHICAGO   (United States)

^c UNIVERSITY OF ALABAMA   (United States)

^d THE UNIVERSITY OF CHICAGO   (United States)

Author keywords

Access control; Authorization; Data security; Database views; Relational algebra

Indexed keywords

AIR TRANSPORTATION; ALGEBRA; CLASSIFICATION (OF INFORMATION); INFORMATION ANALYSIS; MILITARY APPLICATIONS; PUBLIC POLICY; SECURITY OF DATA;

ACCESS CONTROL; AUTHORIZATION; DATABASE VIEWS; RELATIONAL ALGEBRA;

DATABASE SYSTEMS;

EID: 20744431889     PISSN: 10638016     EISSN: None     Source Type: Journal    
DOI: 10.4018/jdm.2005070101     Document Type: Article

References (20)

1. Baskerville, R., & Portougal, V. (2003). A possibility theory framework for security evaluation in national infrastructure protection. Journal of Database Management, 14(2), 1-13.
2. Bell, D.E., & LaPadula, L.J. (1974). Secure computer systems: Mathematical foundations and model. Technical Report. MITRE Corporation.
3. Cattell, R.G.C. (1992). Object data management object-oriented and extended relational database systems. New York: Addison-Wesley.
4. Denning, D.E. (1988). The sea view security model. Proceedings of the IEEE Symposium on Security and Privacy, Oakland, California.
5. Denning, D.E., & Lunt, T.F. (1987). A multi-level relational data model. Proceedings of the IEEE Symposium on Security and Privacy, Oakland, California, (pp. 218-233).
6. Garvey, T.D., & Lunt, T.F. (1992). Cover stories for database security. In S. Jajodia, & C.E. Landwehr (Eds.), Database security V: Status and prospects. North-Holland, MI: Elsevier Science.
7. Gong, L., & Qian, X. (1995). Enriching the expressive power of security label. IEEE Transactions on Knowledge and Data Engineering, 7(5), 839-841.
8. Haigh, J.T., O'Brien, R.C., & Thomasen, D.J. (1991). The LDV secure relational DBMS model. In S. Jajodia, & C.E. Landwehr (Eds.), Database security V: Status and prospects (pp. 265-279). North-Holland, MI: Elsevier Science.
9. Jajodia, S., & Sandhu, R. (1990). Polyinstantiation integrity in multi-level relations. Proceedings of the IEEE Symposium on Security and Privacy, Oakland, California, (pp. 104-115).
10. Jajodia, S., & Sandhu, R. (1991). Toward a multi-level secure relational data model. Proceedings of the ACM SIGMOD, Denver, Colorado, (pp. 50-59).
11. Jajodia, S., Sandhu, R., & Blaustein, B.T. (1995). Solutions to the polyinstantiation problem, essay 21 of information security. In M. Abrams, S. Jajodia, & H. Podell (Eds.), An integrated collection of essays. Los Alamitos, CA: IEEE Computer Security Press.
12. Jukic, N., Nestorov, S., & Vrbsky, S. (2003). Closing the key-loophole in MLS databases. ACM SIGMOD Record, 32(2), 15-20.
13. Jukic, N., Vrbsky, S., Parrish A., Dixon B., & Juki, B. (1999). A belief-consistent multi-level secure relational data model. Information Systems, 24(5), 377-402.
14. Lunt, T. (1992). Research directions in database security. New York: Springier-Verlag.
15. Sandhu, R., & Chen, F. (1995). The semantics and expressive power of the MLR data model. Proceedings of the IEEE Symposium on Security and Privacy, Oakland, California, (pp. 128-143).
16. Sandhu, R., & Chen, F. (1998). The multilevel relational (MLR) data model. Transactions on Information and System Security, 7(1), 93-132.
17. Sandhu, R., & Jajodia, S. (1992). Polyinstantiation for cover stories. Proceedings of the European Symposium on Research in Computer Security. Toulouse, France: Springer-Verlag.
18. Schaefer, M., Lyons, V.A., Martel, P.A., & Kanawati, A. (1995). TOP: A practical trusted ODMS. Proceedings of the Eighteenth National Information Systems Security Conference, Baltimore, Maryland, (pp. 50-62).
19. Smith, K., & Winslett, M. (1992). Entity modeling in the MLS relational model. Proceedings of the Eighteenth VLDB Conference, Vancouver, British Columbia, (pp. 199-210).
20. Winslett, M., Smith, K., & Qian, X. (1994). Formal query languages for secure relational databases. ACM Transactions on Database Systems, 79(4), 626-662.