MLS DBMS Interoperability Study
نویسندگان
چکیده
Interoperability among heterogeneous databases is a fundamental requirement of many emerging Department of Defense (DoD) systems. Often these systems also have requirements for Multilevel-Secure (MLS) operation, where data is labeled to reflect its sensitivity level (e.g., UNCLASSIFIED, SECRET, etc.). The Air Force Rome Laboratory MLS Database Management System (DBMS) Interoperability Study has surveyed the available CommercialOff-The-Shelf (COTS) products supporting interoperability and tested several of them in a multilevel environment. We selected representative products and implemented test scenarios in the ESC/AXS Security Products Transition Analysis Facility (STAF). Our test environment included three commercial MLS DBMS products (Trusted ORACLE7, Informix Online/Secure, and Sybase Secure SQL Server) on several different MLS Operating System (OS) platforms. We also employed “system high” platforms running standard versions of the DBMS and OS products. We successfully moved data to and from the MLS databases using different COTS interoperability solutions. This paper describes our testing efforts and summarizes the lessons learned.
منابع مشابه
Prototyping to explore MLS/DBMS design
This paper examines protoryping as a rcscarch tool for studying multilcvcl secure databases (MLS/DBMS). The paper proposes that an MLS/DSMS design can be quickly prototypcd in Prolog. The prototype is then used as a research tool to expcritnent with the policies and models of the MLVDBMS. To illustrate the principle, we built a Prolog prototype based on the dell and LaPadula model. This prototy...
متن کاملPerformance study of a COTS distributed DBMS adapted for multilevel security
Multilevel secure database management system (MLS/DBMS) products no longer enjoy direct commercial-off-the-shelf (COTS) support. Meanwhile, existing users of these MLS/DBMS products continue to rely on them to satisfy their multilevel security requirements. This calls for a new approach to developing MLS/DBMS systems, one that relies on adapting the features of existing COTS database products r...
متن کاملKernelized Database Systems Security
There are two main types of security in database systems: discretionary security and mandatory security. Discretionary security restricts access to data items at the discretion of the owner. Most commercial database management systems (DBMS) employ some form of discretionary security by controlling access privileges and modes of data users (Griffiths & Wade, 1976). Discretionary security is not...
متن کاملA framework for MLS interoperability
Distributed object-oriented computing (DOC) is a new computing paradigm that promotes component-based development, location independence, scalability, software reuse, etc. Users of multilevel security (MLS) technology want to take advantage of these new technologies. However, the process of incorporating new technologies into MLS products is slower than the analogous process for non-secure comm...
متن کاملDesign and Implementation of Multilevel Databases
This paper brie y describes ongoing research at GMU on the problem of designing and implementing multilevel databases. In a nutshell the objective of our research is to close the semantic gap between sophisticated requirements of MLS applications and the relatively meager facilities provided by emerging MLS DBMS products. There is a missing links in previous research in the MLS database arena. ...
متن کاملذخیره در منابع من
با ذخیره ی این منبع در منابع من، دسترسی به آن را برای استفاده های بعدی آسان تر کنید
عنوان ژورنال:
دوره شماره
صفحات -
تاریخ انتشار 1996