Secure Network Databases: Survey and Analysis.

摘要

This report presents a survey and an analysis of multilevel secure database management systems (DBMS). The DBMS is assumed applied in network databases. Secure databases become of vital concern when customers are allowed to access mission critical telecommunication network databases. The report gives an overview of the major concerns of database security: Secrecy, consistency, and availability. The focus has been on the two first items. A survey and analysis of different architectural and policy approaches to mandatory and discretionary access control policies are given. Multilevel security affects a number of the internal mechanisms of a DBMS such as concurrency control and recovery. It is vital to choose policies that avoid covert channels. We have in the report developed a new concurrency control policy called advanced orange locking. A recovery method that goes with the advanced orange locking policy is developed. The recovery method is based on the ARIES recovery method. The report gives a survey of multilevel secure distributed DBMSs. We have in particular focused on management of cryptography keys as this is of particular concern in a secure DBMS. A scheme supporting mode autonomy with respect to cryptography key is proposed.