Multilevel secure data stream processing: Architecture and implementation

Journal of Computer Security

Volumn 20, Issue 5, 2012, Pages 547-581

  Adaikkalavan, Raman ^a   Xie, Xing ^b   Ray, Indrakshi ^b  

^a INDIANA UNIVERSITY SOUTH BEND   (United States)

^b Department of Computer Science   (United States)

Author keywords

continuous query processing; DSMS; Multilevel security

Indexed keywords

CONTINUOUS QUERIES; CONTINUOUS QUERY PROCESSING; DATA STREAM MANAGEMENT SYSTEMS; DSMS; EXPERIMENTAL EVALUATION; HIGH-SPEED DATA; ILLEGAL INFORMATION FLOW; MEMORY USAGE; MONITORING APPLICATIONS; MULTI-LEVEL SECURITY; ON-THE-FLY; PERFORMANCE BENEFITS; PROCESSING NEEDS; SECURE DATA; SENSITIVE APPLICATION;

DATA COMMUNICATION SYSTEMS; DATA PROCESSING; EMBEDDED SYSTEMS; MOBILE DEVICES; NETWORK ARCHITECTURE; QUALITY OF SERVICE; QUERY PROCESSING;

INFORMATION MANAGEMENT;

EID: 84872236493     PISSN: 0926227X     EISSN: None     Source Type: Journal    
DOI: 10.3233/JCS-2012-0451     Document Type: Conference Paper

References (41)

1. D.J. Abadi, Y. Ahmad, M. Balazinska, U. Çetintemel, M. Cherniack, J. Hwang, W. Lindner, A. Maskey, A. Rasin, E. Ryvkina, N. Tatbul, Y. Xing and S.B. Zdonik, The design of the Borealis stream processing engine, in: Proc. of the CIDR, 2005, pp. 277-289.
2. R. Adaikkalavan and T. Perez, Secure shared continuous query processing, in: Proc. of the ACM SAC (Data Streams Track), Taiwan, 2011, pp. 1005-1011.
3. R. Adaikkalavan, I. Ray and X. Xie, Multilevel secure data stream processing, in: Proc. of the DBSec, 2011, pp. 122-137.
4. A. Arasu, B. Babcock, S. Babu, J. Cieslewicz, M. Datar, K. Ito, R Motwani, U. Srivastava and J. Widom, STREAM: the Stanford data stream management system, Technical Report 2004-20, Stanford InfoLab, 2004.
5. A. Arasu, S. Babu and J. Widom, The CQL continuous query language: semantic foundations and query execution, VLDB J. 15(2) (2006), 121-142. (Pubitemid 43938935)
6. V. Atluri, S. Jajodia, T.F. Keefe, C.D. McCollum and R. Mukkamala, Multilevel secure transaction processing: status and prospects, in: Proc. of the DBSec, 1996, pp. 79-98.
7. R. Avnur and J. Hellerstein, Eddies: continuously adaptive query processing, in: Proc. of the ACM SIGMOD, 2000, pp. 261-272.
8. B. Babcock, S. Babu, M. Datar, R. Motwani and D. Thomas, Operator scheduling in data stream systems, VLDB J. 13(4) (2004), 333-353. (Pubitemid 39653741)
9. B. Babcock, S. Babu, M. Datar, R. Motwani and J. Widom, Models and issues in data stream systems, in: Proc. of the PODS, 2002, pp. 1-16. (Pubitemid 35017047)
10. B. Babcock, S. Babu, R. Motwani and M. Datar, Chain: operator scheduling for memory minimization in data stream systems, in: Proc. of the ACM SIGMOD, 2003, pp. 253-264.
11. B. Babcock, M. Datar and R. Motwani, Load shedding for aggregation queries over data streams, in: Proc. of the ICDE, 2004, pp. 350-361.
12. H. Balakrishnan, M. Balazinska, D. Carney, U. Çetintemel, M. Cherniack, C. Convey, E. Galvez, J. Salz, M. Stonebraker, N. Tatbul, R. Tibbetts and S.B. Zdonik, Retrospective on Aurora, VLDB J. 13(4) (2004), 370-383. (Pubitemid 39653743)
13. D.E. Bell and L.J. LaPadula, Secure computer system: unified exposition and MULTICS interpretation, Technical Report MTR-2997, Revision 1 and ESD-TR-75-306, Revision 1, The MITRE Corporation, Bedford, MA, March 1976.
14. M. Bishop, Computer Security: Art and Science, Addison-Wesley, Reading, MA, 2002.
15. J. Cao, B. Carminati, E. Ferrari and K. Tan, ACStream: enforcing access control over data streams, in: Proc. of the ICDE, 2009, pp. 1495-1498.
16. B. Carminati, E. Ferrari and K.L. Tan, Enforcing access control over data streams, in: Proc. of the ACM SACMAT, 2007, pp. 21-30. (Pubitemid 47281534)
17. D. Carney, U. Çetintemel, M. Cherniack, C. Convey, S. Lee, G. Seidman, M. Stonebraker, N. Tatbul and S.B. Zdonik, Monitoring streams-a new class of data management applications, in: Proc. of the VLDB, 2002, pp. 215-226.
18. D. Carney, U. Çetintemel, A. Rasin, S.B. Zdonik, M. Cherniack and M. Stonebraker, Operator scheduling in a data stream manager, in: Proc. of the VLDB, 2003, pp. 838-849.
19. S. Castano, M.G. Fugini, G. Martella and P. Samarati, Database Security, Addison-Wesley, Reading, MA, 1994.
20. S. Chakravarthy and Q. Jiang, Stream Data Processing: A Quality of Service Perspective Modeling, Scheduling, Load Shedding, and Complex Event Processing, Advances in Database Systems, Vol. 36, Springer, New York, 2009.
21. S. Chakravarthy and V. Pajjuri, Scheduling strategies and their evaluation in a data stream management system, in: Proc. of the BNCOD, 2006, pp. 220-231. (Pubitemid 44165550)
22. F.-C.F. Chen and M.H. Dunham, Common subexpression processing in multiple-query processing, TKDE J. 10(3) (1998), 493-499. (Pubitemid 128749995)
23. M. Cherniack, H. Balakrishnan, M. Balazinska, D. Carney, U. Çetintemel, Y. Xing and S.B. Zdonik, Scalable distributed stream processing, in: Proc. of the CIDR, 2003, pp. 257-268.
24. J. Chin and J. Carbonell, Predicate indexing for incremental multi-query optimization, in: Proc. of the International Symposium on ISMIS, pp. 339-350, 2008.
25. A. Das, J. Gehrke and M. Riedewald, Approximate join processing over data streams, in: Proc. of the ACM SIGMOD, 2003, pp. 40-51.
26. S.J. Finkelstein, Common subexpression analysis in database applications, in: Proc. of the ACM SIGMOD, 1982, pp. 235-245.
27. B. George and J.R. Haritsa, Secure concurrency control in firm real-time databases, Distrib. Parallel Databases J. 8(1) (2000), 41-83. (Pubitemid 30572230)
28. A. Gilani, S. Sonune, B. Kendai and S. Chakravarthy, The anatomy of a stream processing system, in: Proc. of the BNCOD, 2006, pp. 232-239. (Pubitemid 44165551)
29. J. Goldstein and P.A. Larson, Common subexpression analysis in database applications, in: Proc. of the ACM SIGMOD, 2001, pp. 331-342.
30. Q. Jiang and S. Chakravarthy, Scheduling strategies for processing continuous queries over streams, in: Proc. of the BNCOD, 2004, pp. 16-30.
31. B. Kendai and S. Chakravarthy, Load shedding in mavstream: analysis, implementation, and evaluation, in: Proc. of the BNCOD, 2008, pp. 100-112.
32. W. Lindner and J. Meier, Securing the Borealis data stream engine, in: Proc. of the IDEAS, 2006, pp. 137-147. (Pubitemid 351307816)
33. R.V. Nehme, H. Lim, E. Bertino and E.A. Rundensteiner, StreamShield: a stream-centric approach towards security and privacy in data stream environments, in: Proc. of the ACM SIGMOD, 2009, pp. 1027-1030.
34. R.V. Nehme, E.A. Rundensteiner and E. Bertino, A security punctuation framework for enforcing access control on streaming data, in: Proc. of the ICDE, 2008, pp. 406-415.
35. G. Ozsoyoglu and R.T. Snodgrass, Temporal and real-time databases: a survey, IEEE J. Knowl. Data Eng. 7(4) (1995), 513-532.
36. T.K. Sellis, Multi-query optimization, ACM TODS J. 13(1) (1988), 23-52.
37. S.H. Son and R. David, Design and analysis of a secure two-phase locking protocol, in: Proc. of the CSAC, 1994, pp. 374-379.
38. Stanford Stream Data Manager (STREAM), http://infolab.stanford.edu/ stream/code.
39. N. Tatbul, U. Çetintemel, S.B. Zdonik, M. Cherniack and M. Stonebraker, Load shedding in a data stream manager, in: Proc. of the VLDB, 2003, pp. 309-320.
40. N. Tatbul and S.B. Zdonik, Window-aware load shedding for aggregation queries over data streams, in: Proc. of the VLDB, 2006, pp. 799-810.
41. S.D. Viglas and J.F. Naughton, Rate-based query optimization for streaming information sources, in: Proc. of the ACM SIGMOD, 2002, pp. 37-48. (Pubitemid 34985534)