Enforcing Integrity While Maintaining Secrecy

Published

July 27, 1999

Author(s)

D G. Marks

Abstract

We consider the role of constraints in maintaining both secrecy and integrity in a multilevel secure database. In a multilevel database, certain integrity and classification constraints create a secrecy problem since data additions, deletions or modifications require accessing data at higher levels. In many cases, however, these constraints may be approximated by a series of simpler constraints, called level-valid constraints. Level-valid constraints do not require access to any data that is classified higher than the data to be modified. Moreover, they meet the integrity requirements since any database state that satisfies the level-valid constraints also satisfies the multilevel constraints. Simple tests are developed to ensure the validity of proposed level-valid constraints and these constraints are derived for common cases of multilevel constraints.

Proceedings Title

Proceedings of the IFIP WG 11.3 Thirteenth International Conference on Database Security: Research Advances in Database and Information Systems Security

Conference Dates

July 26-28, 1999

Conference Location

Seattle, WA

Pub Type

Conferences

Keywords

constraint processing, level-valid, multi-level security

Citation

Marks, D. (1999), Enforcing Integrity While Maintaining Secrecy, Proceedings of the IFIP WG 11.3 Thirteenth International Conference on Database Security: Research Advances in Database and Information Systems Security , Seattle, WA (Accessed April 25, 2024)