Mandatory and Discretionary Access Control in Object-Oriented Database Management Systems

9303416 Jajodia这是三年持续奖励的第一年资助。这个项目的目标是研究与面向对象数据库系统中强制性和可自由支配性安全性相关的问题。Jajodia和Kogan最近提出的数据库安全模型（称为消息过滤模型）被用作本研究的出发点。消息筛选器模型的主要优点是它与面向对象数据模型的兼容性，以及声明和执行安全策略的简单性。正在研究的主题包括：(1)如何在消息过滤器模型中对多层实体进行建模，更新操作的操作语义，以及不必信任的安全垃圾收集机制的实现；(2)如何使用面向对象的方法来克服完整性和保密性需求之间的冲突；(3)如何扩展消息过滤模型以纳入自由裁量控制。访问控制是任何数据管理系统的关键功能。这项研究将导致一个专门针对面向对象数据库系统的安全模型，而不会损害面向对象方法相对于传统方法所提供的优势。＊＊＊

9303416 Jajodia This is the first year funding of a three-year continuing award. The goal of this project is to investigate issues related to both mandatory and discretionary security in object-oriented database systems. The database security model, called the message filter model, proposed recently by Jajodia and Kogan is used as a departure point for this research. The chief advantages of the message filter model are its compatibility with the object-oriented data model and the simplicity with which security policies can be stated and enforced. Topics that are being investigated include: (1) how multilevel entities can be modeled in the message filter model, operational semantics of update operations, and implementation of a secure garbage collection mechanism that does not have to be trusted; (2) how the conflict between integrity and secrecy requirements can be overcome using the object-oriented approach; and (3) how the message filter model can be extended to incorporate discretionary controls. Access control is a crucial functionality for any data management system. This research will lead to a security model specifically targeted to object-oriented database systems, without compromising the advantages provided by the object-oriented approach over conventional approaches. ***