A Semantic-Based Transaction Processing Model for Multilevel Transactions
نویسندگان
چکیده
Multilevel transactions have been proposed for multilevel secure databases; in contrast to most proposals, such transactions allow users to read and write across multiple security levels. The security requirement that no high level operation in uence a low level operation often con icts with the atomicity requirement of the standard transaction processing model. In particular, others have shown that no concurrency control algorithm based on the standard transaction processing model can guarantee both atomicity and security. This con ict motivates us to propose an alternative semantic-based transaction processing model for multilevel transactions. Our model uses the semantics of the application to analyze an application and reason about its behavior. Our notion of correctness is based on semantic correctness instead of serializability as in the standard transaction processing model. Semantic correctness ensures that database consistency is maintained, transactions output consistent data, and all partially executed transactions complete. We show how an example application can be analyzed to assure semantic correctness and how this analysis can be automated. We also propose a simple timestamp-based multiversion concurrency control algorithm for transaction processing on a kernelized architecture. The advantages of our model over the standard transaction processing model are that atomicity can be assessed, and for some applications ensured via o line analysis, more concurrency is achieved, lesser synchronization between security levels is required, and a larger class of multilevel transactions can be processed.
منابع مشابه
Towards a Uni ed Framework and Theory for Reasoning about Security and Correctness of Transactions in MultilevelDatabases
The development of transaction management schemes is essential to the maturing of database technology for multilevel secure environments. Accordingly, several concurrency control and transaction management schemes have appeared in the recent literature. However, a close examination of these proposals reveal that they are cast in the context of individual problems and specialized architectures. ...
متن کاملTowards a Uni ed Framework and Theory for Reasoning aboutSecurity and Correctness of Transactions
The development of transaction management schemes is essential to the maturing of database technology for multilevel secure environments. Accordingly, several concurrency control and transaction management schemes have appeared in the recent literature. However, a close examination of these proposals reveal that they are cast in the context of individual problems and specialized architectures. ...
متن کاملVerified Order-Based Transaction Scheduling Scheme for Multilevel Secure Database Management Systems
While the secure transaction schedulers in multilevel secure database systems synchronize transactions cleared at different security levels, they must consider the problem of covert channel. Through the covert channel, malicious users leak secret information in a way of intentional interference among the transactions that they invoked. Much work had been done for closing the covert channel. Alt...
متن کاملThe Concurrency Control and Recovery Problem for Multilevel Update Transactions in MLS System
This paper addresses the problem of a transaction reading and writing data at multiple classification levels in a Multilevel Secure (MLS) database. We refer to such transactions as multilevel update transactions. We show that no scheduler can ensure atomicity of multilevel update transactions in the presence of transaction aborts and at the same time be secure. There are essentially two ways of...
متن کاملConcurrency Control for Multilevel Secure Databases
A multilevel secure database is intended to protect classified information from unauthorized users based on the classification of the data and the clearances of the users. The concurrency control requirements for transaction processing in multilevel secure database management systems (MLS/DBMSs) are different from those in conventional transaction processing systems. In MLS/DBMSs, coordination ...
متن کاملذخیره در منابع من
با ذخیره ی این منبع در منابع من، دسترسی به آن را برای استفاده های بعدی آسان تر کنید
برای دانلود متن کامل این مقاله و بیش از 32 میلیون مقاله دیگر ابتدا ثبت نام کنید
ثبت ناماگر عضو سایت هستید لطفا وارد حساب کاربری خود شوید
ورودعنوان ژورنال:
- Journal of Computer Security
دوره 6 شماره
صفحات -
تاریخ انتشار 1998