The DIAMOND security policy for object-oriented databases

ABSTRACT

A formal data model and integrated multilevel security policy for object-oriented database systems are presented in this paper. The security policy addresses mandatory as well as discretionary security controls. Classes derive security classification constraints from their instances and logical instances.

REFERENCES

• 1: François Banciihon, Object-oriented database systems, Proceedings of the seventh ACM SIGACT-SIGMOD-SIGART symposium on Principles of database systems, p.152-162, March 1988, Austin, Texas, United States [doi>10.1145/308386.308429]
• 2: Jay Banerjee , Hong-Tai Chou , Jorge F. Garza , Won Kim , Darrell Woelk , Nat Ballou , Hyoung-Joo Kim, Data model issues for object-oriented applications, ACM Transactions on Information Systems (TOIS), v.5 n.1, p.3-26, Jan. 1987 [doi>10.1145/22890.22945]
• 3: T. Keefe, W. Tsai, and M. Thuraisingham. A mu|tilevel security model for object-oriented systems. In Proceedings of the llth National Computer Security Conference, pages 75-83, 1988.
• 4: T. F. Keefe , W. T. Tsai , M. B. Thuraisingham, SODA: a secure object-oriented database system, Computers and Security, v.8 n.6, p.517-533, Oct. 1989 [doi>10.1016/0167-4048(89)90081-3 ]
• 5: Won Kim, Introduction to object-oriented databases, MIT Press, Cambridge, MA, 1991
• 6: Linda M. Null, A multilevel security model for object-oriented database systems, Iowa State University, Ames, IA, 1992
• 7: L. Null and J. Wong. Secure transaction processing in an object-oriented database environment. In Proceedings of ISMM, (accepted), Long Beach, CA, Dec 1991.
• 8: M. B. Thuraisingham, Mandatory security in object-oriented database systems, Conference proceedings on Object-oriented programming systems, languages and applications, p.203-210, October 02-06, 1989, New Orleans, Louisiana, United States

INDEX TERMS

Primary Classification:
  H. Information Systems
  H.2 DATABASE MANAGEMENT
      H.2.1 Logical Design
          Subjects: Data models

Additional Classification:
  H. Information Systems
  H.2 DATABASE MANAGEMENT
      H.2.0 General
          Subjects: Security, integrity, and protection**

General Terms:
Security, Theory