Designing Multilevel Relational Databases for Security-Control

一个设计良好的数据库必须在安全控制和操作效率之间取得平衡。因此，我们的主要目标是开发一种在动态环境中统一安全性(访问控制和推理控制)和效率方面的多级数据库设计理论。该项目确定了这些方面施加的关键限制，并制定了数据库设计的实用指导方针。重点放在推理控制和异常消除的基本数据依赖关系上。所采用的方法处理格论关系模型，通过抽象或遮蔽用户视图中的敏感信息来实施数据库安全。该模型使用了从自然等价物中构建的“语境”。上下文产生能够保持抽象的多级关系，并支持丰富且高度安全的数据语言。上下文还在抽象中结合了语义；这有助于在用户便利性和数据库安全性之间取得平衡。格子理论框架简化了研究；经典的设计问题也很容易映射到它们的多层次公式。调查还侧重于甲骨文对安全控制模型的实施。对实施查询处理设施给予了特别考虑。这项研究的结果将对处理抽象信息的数据库的设计产生重大影响，特别是那些支持人工智能和专家系统应用的数据库，因为稳健和高效的安全控制是数据库和知识库设计人员面临的关键问题。//

A well-designed database must balance security-control and operational efficiency. Consequently, the principal objective is to develop a design theory for multilevel databases unifying security (access-control and inference-control) and efficiency aspects in a dynamic environment. This project identifies the key constraints imposed by these aspects and formulates practical guidelines for database design. Emphasis is placed on data dependencies fundamental to inference-control and anomaly- elimination. The approach employed deals with a lattice-theoretic relational model enforcing database security by abstracting or clouding sensitive information in user views. The model uses "contexts" constructed from natural equivalences. Contexts induce multilevel relations capable of holding abstraction, and support a rich and highly secure data language. Contexts also incorporate semantics in abstraction; this helps balance user convenience and database security. The lattice-theoretic framework simplifies the investigation; classical design issues are also readily mapped to their multilevel formulations. The investigation also focuses on an Oracle implementation of the security-control model. Special consideration is given to implementing the query-handling facility. The results of this research will have a significant impact on the design of databases handling abstract information, and particularly those supporting AI and expert systems applications, as robust and efficient security-control is a critical issue facing database and knowledge-base designers. //