A Semantic-Based Transaction Processing Model for Multilevel Transactions

نویسندگان

  • Indrakshi Ray
  • Paul Ammann
  • Sushil Jajodia
چکیده

Multilevel transactions have been proposed for multilevel secure databases; in contrast to most proposals, such transactions allow users to read and write across multiple security levels. The security requirement that no high level operation in uence a low level operation often con icts with the atomicity requirement of the standard transaction processing model. In particular, others have shown that no concurrency control algorithm based on the standard transaction processing model can guarantee both atomicity and security. This con ict motivates us to propose an alternative semantic-based transaction processing model for multilevel transactions. Our model uses the semantics of the application to analyze an application and reason about its behavior. Our notion of correctness is based on semantic correctness instead of serializability as in the standard transaction processing model. Semantic correctness ensures that database consistency is maintained, transactions output consistent data, and all partially executed transactions complete. We show how an example application can be analyzed to assure semantic correctness and how this analysis can be automated. We also propose a simple timestamp-based multiversion concurrency control algorithm for transaction processing on a kernelized architecture. The advantages of our model over the standard transaction processing model are that atomicity can be assessed, and for some applications ensured via o line analysis, more concurrency is achieved, lesser synchronization between security levels is required, and a larger class of multilevel transactions can be processed.

برای دانلود متن کامل این مقاله و بیش از 32 میلیون مقاله دیگر ابتدا ثبت نام کنید

ثبت نام

اگر عضو سایت هستید لطفا وارد حساب کاربری خود شوید

منابع مشابه

Towards a Uni ed Framework and Theory for Reasoning about Security and Correctness of Transactions in MultilevelDatabases

The development of transaction management schemes is essential to the maturing of database technology for multilevel secure environments. Accordingly, several concurrency control and transaction management schemes have appeared in the recent literature. However, a close examination of these proposals reveal that they are cast in the context of individual problems and specialized architectures. ...

متن کامل

Towards a Uni ed Framework and Theory for Reasoning aboutSecurity and Correctness of Transactions

The development of transaction management schemes is essential to the maturing of database technology for multilevel secure environments. Accordingly, several concurrency control and transaction management schemes have appeared in the recent literature. However, a close examination of these proposals reveal that they are cast in the context of individual problems and specialized architectures. ...

متن کامل

Verified Order-Based Transaction Scheduling Scheme for Multilevel Secure Database Management Systems

While the secure transaction schedulers in multilevel secure database systems synchronize transactions cleared at different security levels, they must consider the problem of covert channel. Through the covert channel, malicious users leak secret information in a way of intentional interference among the transactions that they invoked. Much work had been done for closing the covert channel. Alt...

متن کامل

The Concurrency Control and Recovery Problem for Multilevel Update Transactions in MLS System

This paper addresses the problem of a transaction reading and writing data at multiple classification levels in a Multilevel Secure (MLS) database. We refer to such transactions as multilevel update transactions. We show that no scheduler can ensure atomicity of multilevel update transactions in the presence of transaction aborts and at the same time be secure. There are essentially two ways of...

متن کامل

Concurrency Control for Multilevel Secure Databases

A multilevel secure database is intended to protect classified information from unauthorized users based on the classification of the data and the clearances of the users. The concurrency control requirements for transaction processing in multilevel secure database management systems (MLS/DBMSs) are different from those in conventional transaction processing systems. In MLS/DBMSs, coordination ...

متن کامل

ذخیره در منابع من


  با ذخیره ی این منبع در منابع من، دسترسی به آن را برای استفاده های بعدی آسان تر کنید

برای دانلود متن کامل این مقاله و بیش از 32 میلیون مقاله دیگر ابتدا ثبت نام کنید

ثبت نام

اگر عضو سایت هستید لطفا وارد حساب کاربری خود شوید

عنوان ژورنال:
  • Journal of Computer Security

دوره 6  شماره 

صفحات  -

تاریخ انتشار 1998