ASDViews relational databases

摘要

A description is given of ASDViews, an implementation of views asnthe security object in a multilevel secure relational databasenmanagement system (DBMS) that results in a small trusted computing basen(TCB) as required to meet the criteria for evaluation class B2 andnabove. A general view is the result of a database query. Since most ofnthe code which implements the DBMS is involved in processing the query,nmost of the DBMS must be trusted. ASDViews is defined using a subset ofnthe relational algebra to restrict the size of the query languagenavailable to define a secure view. This approach reduces that part ofnthe TCB required to implement secure views to roughly 1000 lines of code