Research Directions in Database Security

Size: px

Start display at page:

Download "Research Directions in Database Security"

Lambert York
5 years ago
Views:

1 Research Directions in Database Security

2 Teresa F. Lunt Editor Research Directions in Database Security With 16 Illustrations Springer-Verlag New York Berlin Heidelberg London Paris Tokyo Hong Kong Barcelona Budapest

3 Teresa F. Lunt Program Manager Secure Systems SRI International 333 Ravenswood Avenue Menlo Park, CA USA Library of Congress Cataloging-in-Publication Data Research directions in database security / Teresa F. Lunt, editor p. cm. Discussions of topics presented at a workshop held at the Vallombrosa Conference and Retreat Center, Menlo Park, Calif., May 24-26, 1988, sponsored by the US Air Force, Rome Air Development Center. Includes bibliographical references and index. 1. Data base security--congresses. 1. Lunt, Teresa F. II. Rome Air Development Center. QA76.9.D314R dc Printed on acid-free paper Springer-Verlag New York, Inc. Softcover reprint of the hardcover 1st edition 1992 All rights reserved. This work may not be translated or copied in whole or in part without the written permission ofthe publisher (Springer-Verlag New York, Inc., 175 Fifth Avenue, New York, NY 10010, USA), except for brief excerpts in connection with reviews or scholarly analysis. Use in connection with any form of information storage and retrieval, electronic adaptation, computer software, or by similar or dissimilar methodology now known or hereafter developed is forbidden. The use of general descriptive names, trade names, trademarks, etc., in this publication, even if the former are not especially identified, is not to be taken as a sign that such names, as understood by the Trade Marks and Merchandise Marks Act, may accordingly be used freely by anyone. Production managed by Karen Phillips; manufacturing supervised by Robert Paella. Photocomposed pages prepared from the editor's LATEX file ISBN-13: DOl: / e-isbn-13:

4 Contributors 1 Workshop Summary TERESA F. LUNT 1.1 Introduction. 1.2 Labels Aggregation. Discretionary Security The Homework Problem Classification Semantics Assurance Balanced Assurance TCB Subsetting Layered TCB. New Approaches... Classifying Metadata. Conclusions References. 2 SeaView TERESA F. LUNT 2.1 Introduction. 2.2 Multilevel Security 2.3 Multilevel Relations The Extended Relational Integrity Rules Polyinstantiation Constraints Discretionary Security 2.5 Multilevel SQL The Access Class Data Type Dealing with Polyinstantiation Creating Multilevel Relations 2.6 The SeaView Verification.... xiii

5 vi 2.7 The SeaView Design 2.8 Data Design Considerations 2.9 Conclusions 2.10 References Al Secure DBMS Architecture 33 THOMAS H. HINKE, CRISTI GARVEY, AND AMY Wu 3.1 Introduction The Al Secure DBMS Modes of Operation The Al Secure DBMS Security Policy Overview Al Secure DBMS Architecture Why is ASD Needed? For Further Information References An Investigation of Secure Distributed DBMS Architectures 41 JAMES P. O'CONNOR, JAMES W. GRAY III, CATHERINE MCCOLLUM, AND LouAANNA NOTARGIACOMO 4.1 Introduction Background Requirements Concept of Operation Users Security Policy Overview Discretionary Access Control Mandatory Access Control Architecture Definition Abstract Model Architectural Parameters Family of Architecture Generation Discretionary Access Control Enforcement Summary and Conclusions References LOCK Data Views 63 PAUL STACHOUR 5.1 Introduction Problem Statement Security Policy Overview LOCK Security Policy Overview DBMS Policy Extension Needs DBMS Policy Extensions Pipelines The Response Pipeline Design 69

6 vii LOCK Pipeline Organization Response Pipeline Organization Pipeline Implications. 5.4 Conclusions 5.5 References Sybase Secure SQL Server 81 HELENA WINKLER 6.1 Introduction Terms and Definitions Objectives B2 Design Philosophy Database Server On A Network B2 Sybase Secure SQL Server Flow of Control Login Parsing and Compilation Description of Procedures Execution of Procedures Trusted Operations SSO Trusted Interface User - Trusted Interface Auditing Conclusions An Evolution of Views 91 DOROTHY E. DENNING 7.1 Introduction References Discussion: Pros and Cons of the Various Approaches 97 DOROTHY E. DENNING AND WILLIAM R. SHOCKLEY 8.1 Introduction Inference Problem Aggregation Problem Problem Instances Two Approaches Retrospective References The Homework Problem 105 RAE K. BURNS

7 viii 10 Report on the Homework Problem RAE K. BURNS 10.1 Introduction The Example Database 10.3 Summary Classifying and Downgrading: Is a Human Needed in the Loop? 125 GARY W. SMITH 11.1 Introduction Underlying Concepts Classifying Outputs Semantic Level Approach Classifying and Downgrading The Issue The Answer Structured Data Security Semantics of an Application Types of Security Semantics Textual Data Summary References Session Report: The Semantics of Data Classification 135 GARY W. SMITH 12.1 Introduction References Inference and Aggregation 143 MATTHEW MORGENSTERN, TOM HINKE, AND BHAVANI THURAISINGHAM 13.1 Introduction Database Inference The Problem A Solution Approach The Inference Problem Analysis of Logical Inference Problems When Classifying a Rule is Worse than Useless Sphere of Influence Analysis Network of Constraints Questions General Discussion References

8 ix 14 Dynamic Classification and Automatic Sanitization 161 MARVIN SCHAEFER 14.1 Introduction Sanitization Initial Overclassification Initial Underclassification Discovered Misclassification Automatic Classification References Presentation and Discussion on Balanced Assurance 167 WILLIAM R. SHOCKLEY 15.1 Introduction References Some Results from the Entity/Relationship Multilevel Secure DBMS Project 173 GEORGE E. GAJNAK 16.1 Project Goals and Assumptions A Multilevel Entity/Relationship Model Data Model Semantics Multilevel Security Characteristics Results of Research The Underlying Abstraction Conclusions References Designing a Trusted Application Using an Object-Oriented Data Model 191 CATHERINE MEADOWS AND CARL LANDWEHR 17.1 Introduction The Object-Oriented Data Model The SMMS as an Object-Oriented Database Conclusion and Future Directions References Foundations of Multilevel Databases 199 BHAVANI THURAISINGHAM 18.1 Introduction Definitional Preliminaries Model Theoretic Approach Query Evaluation Database Updates Proof Theoretic Approach Query Evaluation. 209

9 x Database Updates Environments and Fixed Points Environments Mappings Fixed Points Least Environment Declarative and Procedural Semantics Environments and Inference Handling Negative and Indefinite Information Closed-World Assumption Negation by Failure Formal Semantics of Time Other Related Topics Theory of Relational Databases Consistency and Completeness of Security Constraints Assigning Security Levels to Data Conclusion References An Application Perspective on DBMS Security Policies 227 RAE K. BURNS 19.1 Introduction Problems with Automatic Polyinstantiation Polyinstantiation and Entity Integrity Polyinstantiation and Referential Integrity Polyinstantiation verses Application Consistency Problems with Simplistic Mandatory Policies Problems with View-Based Controls and Constraints Requirement for Transaction Authorizations Summary References New Approaches to Database Security: Report on Discussion 235 CATHERINE MEADOWS 20.1 Introduction Report on Discussion Open Problems in Computer Security Old Problems for Operating Systems but New Problems for Database Systems Database-Specific Problems Challenge Posed by Advances in Database Technology Conclusion References

10 21 Metadata and View Classification LouANNA NOTARGIACOMO 21.1 Introduction Justification for Metadata Protection Metadata Classification Approaches Internal Schema Conceptual Schema External Schema Metadata Protection Schemes 21.5 User Access to Metadata Affect of User Session Level on Data Classification 22 Database Security Research at NCSC JOHN R. CAMPBELL 22.1 Introduction Sponsored Research Projects 22.3 The Future Discussion Topics Position Paper on DBMS Security JOSEPH GIORDANO 23.1 Introduction Conclusions Index Xl

11 Contributors Rae K. Burns The MITRE Corporation Burlington Road Bedford, Massachusetts John R. Campbell National Computer Security Center 9800 Savage Road Fort Meade, Maryland Dorothy E. Denning Georgetown University 225 Reiss Science Building Washington, DC George E. Gajnak DEC 151 Taylor Street TAY1 Littleton, Massachusetts Cristi Garvey TRW Defense Systems Group One Space Park Redondo Beach, California Joseph Giordano Rome Laboratory Griffiss Air Force Base Rome, New York James W. Gray III Naval Research Laboratory Washington, DC Thomas H. Hinke Computer Science Department University of Alabama in Huntsville Computer Science Building Huntsville, Alabama Carl Landwehr Office of Research and Development Center for Secure Information Technology Naval Research Laboratory Washington, DC Teresa F. Lunt SRI International, Computer Science Laboratory 333 Ravenswood Avenue Menlo Park, California Catherine McCollum Unisys 8201 Greensboro Drive, Ste 1000 McLean, Virginia Catherine Meadows Office of Research and Development Center for Secure Information Technology Naval Research Laboratory Washington, DC

12 xiv Contributors Matthew Morgenstern Xerox Advanced Information Technology 4 Cambridge Center Cambridge, Massachusetts LouAnna Notargiacomo The MITRE Corporation 7525 Colshire Drive McLean, Virginia James P. O'Connor Software Productivity Consortium Rock Hill Road Herndon, Virginia Marvin Schaefer Trusted Information Systems, Inc Washington Road Route 97 Glenwood, Maryland William R. Shockley DEC TP West 800 West El Camino Real Mountain View, California LTC Gary W. Smith IBM College DOD Computer Institute Washington Navy Yard, Bldg. 175 Washington, DC Paul Stachour Secure Computing Technology Center 1210 County Road E. West, Ste 1000 Arden Hills, Minnesota Bhavani Thuraisingham The MITRE Corporation MS-Z Colshire Drive McLean, Virginia Helena Winkler Sybase Inc Christie Avenue Emeryville, California AmyWu TRW Defense Systems Group One Space Park Redondo Beach, California 90278

Using MSC/NASTRAN: Statics and Dynamics

Using MSC/NASTRAN: Statics and Dynamics A.D. Cifuentes Using MSC/NASTRAN Statics and Dynamics With 94 Illustrations Springer-Verlag New York Berlin Heidelberg London Paris Tokyo Hong Kong Arturo O. Cifuentes