Abstract-In a multilevel secure database management system (MLS/ DBMS) users cleared at different security levels access and share a database consisting of data at a variety of sensitivity levels. The system should ensure that the users only acquire the information to which they are authorized. This is difficult as users could pose multiple queries and deduce unauthorized information. In this paper, we describe the design of Lock Data Views (LDV), a MLSlDBMS which is hosted on the Logical Coprocessing Kernel (LOCK) Trusted Computing Base (TCB). LDV's security policy builds on the security policy of LOCK. Its design is based on three assured pipelines for the query, update, and metadata management operations. We describe the security policy of LDV, its system architecture, the designs of the Query Processor, the Update processor, the Metadata Manager, and the operating system issues. LDV's solution to the inference and aggregation problems are also described. Index Terms-Classification constraint, classification level, inference and aggregation, LDV, LOCK, multilevel secure relational database management system, pipelines, polyinstantiation, secure policy, type enforcement.
Stachour and Thuraisingham propose a system called Lock Data Views (LDV) REF .
Design of LDV: a multilevel secure relational database management system
IEEE Trans. Knowl. Data Eng.
IEEE Trans. Knowl. Data Eng.
Computer Science