Secure access control with high access precision
By: Gregory S. Hoppenstand
Contributors: Naval Postgraduate School (U.S.)
Publisher: Naval Postgraduate School
Published: 1988
Place of publication: Monterey, California
Language: eng
Number of pages: 65
Subjects: Computer science
Description: When classified data of different classifications are stored in a database, it is necessary for a contemporary database system to pass through other classified data to find the properly classified data. Although the user of the system may only see data classified at the user's level, the database system itself has breached the security by bringing the other classified data into the main memory from secondary storage. Additionally, the system is not efficient as it could be because unnecessary material has been retrieved. This is a problem in access precision. This thesis proposes a solution to the access precision and pass-through problems using a database counterpart to the mathematical concept of equivalence relations. Each record of the database contains at least one security attribute (e.g., classification) and the database is divided into compartments of records; Compartments are disjoint sets, where each compartment of records has the same aggregate of security attributes. A suitable database model, the Attribute-Based Data Model, is selected, and an example of implementation is provided. Keywords: Database security; Multilevel security; Computer security. (Theses)
Notes: Thesis advisor(s): Hsiao, David K.

"March 1988."

Thesis (M.S. in Computer Science)--Naval Postgraduate School, March 1988.

Includes bibliographical references.

Approved for public release, distribution unlimited.

US Navy (USN) author.