A model of enforcement relationships among database access control dependencies |
| |
Authors: | H.Rex Hartson Earl J. Balliet |
| |
Affiliation: | Virginia Polytechnic Institute and State University USA |
| |
Abstract: | The various kinds of access decision dependencies within a predicate-based model of database protection are classified according to cost of enforcement. Petri nets and some useful extensions are described. Extended Petri nets are used to model the flow of messages and data during protection enforcement within MULTISAFE, a multimodule system architecture for secure database management. The model demonstrates that some of the stated criteria for security are met within MULTISAFE. Of particular interest is the modeling of data dependent access conditions with predicates at Petri net transitions. Tokens in the net carry the intermodule messages of MULTISAFE. Login, authorization, and database requests are traced through the model as examples. The evaluation of complex access condition predicates is described for the enforcement process. Queues of data and queues of access condition predicates are cycled through the net so that each data record is checked against each predicate. Petri nets are shown to be a useful modeling tool for database security. |
| |
Keywords: | Address correspondence to H. Rex Hartson Computer Science Department Virginia Polytechnic Institute and State University Blacksburg VA 24061. |
本文献已被 ScienceDirect 等数据库收录! |