Title :
The SeaView security model
Author :
Denning, Dorothy E. ; Lunt, Teresa F. ; Schell, Roger R. ; Shockley, William R. ; Heckman, Mark
Author_Institution :
SRI Int., Menlo Park, CA, USA
Abstract :
A formal security policy model that uses basic view concepts for a secure multilevel relational database system is described. The model is formulated in two layers, one corresponding to a security kernel of reference monitor that enforces mandatory security, and the other defining multilevel relations and formalizing policies for labeling new and derived data, data consistency, discretionary security, and transaction consistency. This includes the policies for sanitization, aggregation, and downgrading. The model also defines application-independent properties for entity integrity, referential integrity, and polyinstantiation integrity
Keywords :
relational databases; security of data; SeaView security model; aggregation; application-independent properties; data consistency; derived data; discretionary security; downgrading; entity integrity; formal security policy model; multilevel relations; polyinstantiation integrity; reference monitor; referential integrity; sanitization; secure multilevel relational database system; security kernel; transaction consistency; Access control; Computer science; Computerized monitoring; Data models; Data security; Database systems; Kernel; Labeling; Laboratories; Relational databases;
Conference_Titel :
Security and Privacy, 1988. Proceedings., 1988 IEEE Symposium on
Conference_Location :
Oakland, CA
Print_ISBN :
0-8186-0850-1
DOI :
10.1109/SECPRI.1988.8114
