Maintaining Multilevel Transaction Atomicity in MLS Database Systems with Kernelized Architecture

Costich, Oliver; Kang, Min Woo

doi:10.21236/ada465420

Cited by 15 publications

(15 citation statements)

References 8 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Since this type of MLS workstation can provide a capability to access (read and write) several levels, it may be used as a platform to execute trusted MLS applications [3].…”

Section: Multilevel Secure (Mls) Worktationsmentioning

confidence: 99%

A Framework for MLS Interoperability

Kang¹,

Froscher²,

Moskowitz³

1996

View full text Add to dashboard Cite

Distributed object-oriented computing (DOC) is a new computing paradigm that promotes component-based development, location independence, scalability, software reuse, etc. Users of multilevel security (MLS) technology want to take advantage of these new technologies. However, the process of incorporating new technologies into MLS products is slower than the analogous process for non-secure commercial products because MLS products must go through rigorous evaluation/certification procedures.We propose an architectural framework that speeds up the process of introducing new technologies to MLS users. We examine the drawbacks of traditional MLS approaches and take a fresh look at the requirements of MLS users. We then introduce security-critical components that can enable MLS solutions and an MLS architectural framework that can accommodate not only legacy systems but also new technologies, including DOC, without jeopardizing system security.Our framework separates security critical components/functions from the rest of the system because these components must go through rigorous evaluation/certification processes. This approach enables the secure use of new technologies for MLS users.

show abstract

“…Since this type of MLS workstation can provide a capability to access (read and write) several levels, it may be used as a platform to execute trusted MLS applications [3].…”

Section: Multilevel Secure (Mls) Worktationsmentioning

confidence: 99%

A Framework for MLS Interoperability

Kang¹,

Froscher²,

Moskowitz³

1996

View full text Add to dashboard Cite

show abstract

“…The approach was developed to provide multilevel relational database service, and the current SINTRA prototypes demonstrate this service. The approach and the prototype are documented in numerous papers and reports ([Fros89], [McDe91], [Cost92a], [Cost92b], [Kang92], [Kang93a], [Kang93b], [McDe93], [Cost94], [Kang94]). We briefly summarize two possible SINTRA DBMS configurations: the SINTRA MLS DBMS and distributed SINTRA MLS DB servers.For a SINTRA MLS DBMS (Fig.…”

Section: The Sintra Approach To Mls Database Servicementioning

confidence: 99%

“…A reliable write-up algorithm, known as the Pump [Kang93b], is being implemented as a commercial product. The notion of a multilevel transaction has been defined, and several scheduling algorithms have been developed [Cost92b,Cost94]. Recovery and transaction management issues for distributed SINTRA are currently under investigation.…”

Section: Statusmentioning

confidence: 99%

A Practical Approach to High Assurance Multilevel Secure Computing Service

Froscher¹,

Kang²,

McDermott³

et al. 1994

View full text Add to dashboard Cite

Researchers, system developers, and system integrators have long sought ways to provide acceptable, affordable multilevel secure (MLS) computing services. By "multilevel secure computing service" we mean a single service that permits users with different clearances to have access to computerized data and programs for which they are authorized and prevents them from gaining access to those for which they aren't.Although the history of efforts to provide MLS computing service is entering its third decade, current projects often ignore the lessons that history provides. A practical approach is needed that exploits evolving commercial developments, instead of competing with them.This paper documents an approach that attempts to take computing history and trends into account. It arose in the context of MLS database systems; the architecture and algorithms it depends on have been documented in the database security literature. Recently, we have realized that this approach can be extended to deal with security problems posed by the integration of a wide variety of legacy systems (i.e., obsolescent systems still in operational use) into a cooperative, distributed in Proc.10th Annual Computer Security Applications Conference, Orlando, FL, Dec. 1994 IEEE CS Press, ISBN 0-8186-6795-8, pp.2-11. information system. The following sections place our approach in historical perspective and explain both how it meshes with current commercial developments in database systems and how it can be used to engineer an MLS cooperative, distributed computing environment. A Brief History of MLS ComputingIn the 1960's and 1970's, computation was expensive. Computer systems tended to be large and monolithic; many interactive terminals might be attached to them, they might even have several CPUs and many disk and tape drives, but the basic architecture was centralized. The goal then was to build or shore up time-sharing operating systems so that they could provide users with different clearance levels access to files holding different levels of classified data without compromise. Probably the Multics system came closest to achieving this goal ([Orga72],[NCSC85]) but there were other efforts as well, including the earlier ADEPT-50 and later KVM-370 and Keykos [Land83] projects.A principal motive for trying to provide MLS computing service at that time was the high cost of providing duplicate services at each security level, which was the main alternative. Not only were such duplicate systems expensive, they couldn't communicate with each other securely.Because in many cases such communication was essential, risky and awkward workarounds such as "air-gaps" and "sneaker-nets" were tolerated. Centralized MLS computing service naturally seemed highly desirable, and it seemed only a matter of time before it would be achieved and MLS services would abound, yielding both lower costs and lower risks.Toward the end of the 1970's and into the 1980's, computing power began to migrate away from the monolithic central processor and toward users'...

show abstract

“…It is informally argued that the proposed algorithm is secure, serializable, and there is no starvation. orange locking algorithm proposed by McDermott and Jajodia [MCDE92], and an algorithm for multilevel transactions proposed by Costich and Jajodia [COST92b]. We briefly discuss these efforts.…”

Section: Other Algorithmsmentioning

confidence: 99%

“…Costich and Jajodia [COST92b] have proposed an algorithm for multilevel transactions. It is stated that most of the previous approaches assume that transactions operate at a single level and that in certain cases, a transaction may have to operate at multiple security levels.…”

Section: Other Algorithmsmentioning

confidence: 99%