Abstract
The Chinese Wall policy is one of the well-known commercial security policies. It is used to specify information control when conflicts of interest arise. In other words, it maintains database security by means of classifying accessible data objects according to users’ interest and limiting access to data objects that can cause conflicts of interest. In this paper, we propose a new model that decreases conflicts between user transactions by classifying data objects in a database system according to the users’ interest. In order to achieve our goal, the Chinese Wall policy is newly interpreted and then applied to transaction processing in multilevel secure database systems. And then, more flexible concurrency control protocol based on the proposed model is suggested. Our model might be utilized as flexible security policy that prevents performance degradation of large database systems.
This is a preview of subscription content, log in via an institution to check access.
Access this chapter
Tax calculation will be finalised at checkout
Purchases are for personal use only
Preview
Unable to display preview. Download preview PDF.
References
Atluri, V., Jajodia, S., Keefe, T.F., McColum, C., Mukkamala, R.: Multilevel Secure Transaction Processing: Status and Prospects. In: Proceedings of IFIP WG11.3 10th Annual Working Conference on Database Security (1996)
Bell, D.E., LaPadula, L.J.: Secure Computer Systems: Mathematical Foundations, Technical Report MTR-2997, The Mitre Corporation (1973)
Bernstein, P.A., Hadzilacos, V., Goodman, N.: Concurrency Control and Recovery in Database Systems. Addison Wesley, London (1987)
Brewer, D.F., Nash, M.J.: The Chinese Wall Security Policy. In: Proceedings of the IEEE Symposium on Security and Privacy (1989)
Jajodia, S., Atluri, V.: Alternative Correctness Criteria for Concurrent Execution of Transactions in Multilevel Secure Database Systems. In: Proceedings of the IEEE Symposium in Security and Privacy (1992)
Jajodia, S., Mancinn, L.V., Ray, I.: Secure Locking Protocol for Multilevel Secure Database Systems. In: Proceedings of IFIP 10th Working Conference on Database Security (1997)
Keefe, T.F., Tsai, W.T., Srivastava, J.: Multiversion Secure Database Concurrency Control. In: Proceedings of the 6th International Conference on Data Engineering (1990)
Kumar, V.: Performance of Concurrency Control Mechanism in Centralized Database Systems. Prentice-Hall, Englewood Cliffs (1986)
Lin, T.Y.: Chinese Wall Security Policy Revisited. In: Proceedings of the 14th IFIP 11.3 Working Conference on Database Security (2000)
Park, C., Park, S.: Alternative Correctness Criteria for Multiversion Concurrency Control and its Application in Advanced Database Systems. In: Proceedings of the 9th International Workshop on Database and Expert Systems Applications (1998)
Sandhu, R.S.: A Lattice Interpretation of the Chinese Wall Policy. In: Proceedings of the 15th NIST-NCSC National Computer Conference (1992)
Sobel, A., Kelley, E., Alves-Foss, J.: A Trace-based Model of the Chinese Wall Policy. In: Proceedings of National Information System Security Conference (1999)
Author information
Authors and Affiliations
Editor information
Editors and Affiliations
Rights and permissions
Copyright information
© 2004 Springer-Verlag Berlin Heidelberg
About this paper
Cite this paper
Park, C., Park, S., Kim, Y. (2004). S-COI : The Secure Conflicts of Interest Model for Multilevel Secure Database Systems. In: Lee, Y., Li, J., Whang, KY., Lee, D. (eds) Database Systems for Advanced Applications. DASFAA 2004. Lecture Notes in Computer Science, vol 2973. Springer, Berlin, Heidelberg. https://doi.org/10.1007/978-3-540-24571-1_12
Download citation
DOI: https://doi.org/10.1007/978-3-540-24571-1_12
Publisher Name: Springer, Berlin, Heidelberg
Print ISBN: 978-3-540-21047-4
Online ISBN: 978-3-540-24571-1
eBook Packages: Springer Book Archive