The SeaView security model

Author

Denning, Dorothy E. ; Lunt, Teresa F. ; Schell, Roger R. ; Shockley, William R. ; Heckman, Mark

Author_Institution

SRI Int., Menlo Park, CA, USA

fYear

1988

fDate

18-21 Apr 1988

Firstpage

218

Lastpage

233

Abstract

A formal security policy model that uses basic view concepts for a secure multilevel relational database system is described. The model is formulated in two layers, one corresponding to a security kernel of reference monitor that enforces mandatory security, and the other defining multilevel relations and formalizing policies for labeling new and derived data, data consistency, discretionary security, and transaction consistency. This includes the policies for sanitization, aggregation, and downgrading. The model also defines application-independent properties for entity integrity, referential integrity, and polyinstantiation integrity

Keywords

relational databases; security of data; SeaView security model; aggregation; application-independent properties; data consistency; derived data; discretionary security; downgrading; entity integrity; formal security policy model; multilevel relations; polyinstantiation integrity; reference monitor; referential integrity; sanitization; secure multilevel relational database system; security kernel; transaction consistency; Access control; Computer science; Computerized monitoring; Data models; Data security; Database systems; Kernel; Labeling; Laboratories; Relational databases;

fLanguage

English

Publisher

ieee

Conference_Titel

Security and Privacy, 1988. Proceedings., 1988 IEEE Symposium on

Conference_Location

Oakland, CA

Print_ISBN

0-8186-0850-1

Type

conf

DOI

10.1109/SECPRI.1988.8114

Filename

8114