Covert channel mitigation method for secure real-time database using capacity metric

Tongxin Xuebao/Journal on Communications

Volumn 29, Issue 8, 2008, Pages 46-56

  Zeng, Hai Tao ^a,c   Wang, Yong Ji ^a,b   Ruan, Li ^a,c   Zu, W ^d   Cai, Jia Yong ^a,c  

^a INSTITUTE OF SOFTWARE   (China)

^b INSTITUTE OF GEOLOGY AND GEOPHYSICS   (China)

^c UNIVERSITY OF CHINESE ACADEMY OF SCIENCES   (China)

^d INSTITUTE OF AUTOMATION   (China)

Author keywords

Channel's capacity; Data conflict covert channel; Protocol selection policy; Secure real time database

Indexed keywords

CHANNEL'S CAPACITY; COVERT CHANNELS; DATA CONFLICT COVERT CHANNEL; PROTOCOL SELECTION POLICY; SECURE REAL-TIME DATABASE;

COMPUTER NETWORKS; COMPUTER SYSTEMS;

CONCURRENCY CONTROL;

EID: 51649119359     PISSN: 1000436X     EISSN: None     Source Type: Journal    
DOI: None     Document Type: Article

References (23)

1. Son S H, Mukkamala R, David R. Integrating security and real-time requirements using covert channel capacity [J]. IEEE Transactions on Knowledge and Data Engineering, 2000, 12(6): 865-879.
2. Keefe T F, Tsai W T. Database concurrency control in multilevel secure database management systems [J]. IEEE Transactions on Knowledge and Data Engineering, 1993, 5(6): 1039-1055.
3. U. S. Department of Defense. Trusted Computer System Evaluation Criteria [S]. DoD 5200.28-STD, 1985.
4. General Administration of Quality Supervision, Inspection and Quarantine of the People's Republic of China. Classified Criteria for Security Protection of Computer Information System [S]. GB17859-1999, 1999.
5. Lampson B W. A note on the confinement problem [J]. Communications of the ACM, 1973, 16(10): 613-615.
6. Qing S H, Zhu J F. Covet channel analysis on ANSHENG secure operating system[J]. Journal of Software, 2004, 15(9): 1385-1392.
7. Millen J. 20 Years of covert channel modeling and analysis [A]. Proc of the 1999 IEEE Symposium on Security and Privacy[C]. Oakland, 1999. 113-114.
8. Son S H, David R. Design and analysis of a secure two-phase locking protocol [A]. Proc of the 8th Annual International Computer Software and Applications Conference [C]. Taipei, 1994. 374-379.
9. Jeong B, et al. Optimistic secure real-time concurrency control using multiple data version [A]. Proc of LCTES 2000 [C]. 2001. 33-47.
10. Bertino E, Catania B, Ferrari E. A nested transaction model for multilevel secure database management systems [J]. ACM Transactions on Information and System Security, 2001, 4(4): 321-371.
11. Son S H, Chaney C, Thomlinson N P. Partial security policies to support timeliness in secure real-time databases [A]. Proc of the 1998 IEEE Symposium on Security and Privacy [C]. 1998. 136-147.
12. Ahmed Q N, Vrbsky S V. Maintaining security and timeliness in real-time database system [J]. Journal of Systems and Software, 2002, 61(1): 15-29.
13. Son S H, David R, Thuraisingham B. Improving timeliness in real-time secure database systems [J]. ACM SIGMOD Record, 1996, 25(1): 29-33.
14. Shannon C E, Weaver W. The Mathematical Theory of Communication [M]. University of Illinois Press, 1949.
15. National Computer Security Center. A guide to understanding covert channel analysis [A]. NCSC-TG-003 [C]. 1993.
16. Wang Z, Lee R B. Capacity estimation of non-synchronous covert channels [A]. Proc of the 2nd International Workshop on Security in Distributed Computing Systems [C]. 2005. 170-176.
17. Lanotte R, Maggiolo-Schettini A, et al. Automatic covert channel analysis of a multilevel secure component [A]. Proc of 6th International Conference on Information and Communication Security [C]. 2004. 249-261.
18. Joon S, J Alves-Foss. Covert timing channel analysis of rate monotonic real-time scheduling algorithm in MLS systems [A]. Proc of the 2006 IEEE Workshop on Information Assurance [C]. 2006. 361-368.
19. Zander S, Branch P, Armitage G. Error probability analysis of IP time to live covert channels [A]. Proc of the 2007 International Symposium on Communications and Information Technologies (ISCIT2007)[C]. 2007. 562-567.
20. Zhu J F. Study on covert Channel Analysis in High-Level Secure Operating System [D]. Graduate School of Chinese Academy of Sciences, 2005.
21. Moskowitz I S, Greenwald S J, Kang M H. An analysis of the timed Z-channel [A]. Proc of the 1996 IEEE Symposium on Security and Privacy [C]. Oakland, 1996. 2-11.
22. Wang Y J, Chen Q P. On the schedulability test of rate monotonic (RM) and its extendible algorithms [J]. Journal of Software, 2004, 15(6): 799-814.
23. Moskowitz I S, Kang M K. Covert channels-here to stay? [A] Proc of the 9th Annual Conference on Computer Assurance[C]. Gaithersburg, 1994. 235-243.