Providing security in a phone book database using triggers

摘要

It is proposed that all database security controls except those which provide information flow security can be built using a suitable trigger mechanism. The implementation of an example application, which has a variety of requirements for confidentially, integrity and accountability, is shown to illustrate the technique. The trigger mechanism is to be implemented using query modification as part of the SWORD secure database management system project.