Secure transaction management protocols for MLS/DDBMS

  • Authors:
  • Navdeep Kaur;Rajwinder Singh;Manoj Misra;A. K. Sarje

  • Affiliations:
  • Department of Electronics and Computer Engineering, Indian Institute of Technology Roorkee, Roorkee, India;Department of Electronics and Computer Engineering, Indian Institute of Technology Roorkee, Roorkee, India;Department of Electronics and Computer Engineering, Indian Institute of Technology Roorkee, Roorkee, India;Department of Electronics and Computer Engineering, Indian Institute of Technology Roorkee, Roorkee, India

  • Venue:
  • ICISS'07 Proceedings of the 3rd international conference on Information systems security
  • Year:
  • 2007

Quantified Score

Hi-index 0.00

Visualization

Abstract

Majority of the research in multilevel secure database management systems (MLS/DBMS) focuses primarily on centralized database systems. However, with the demand for higher performance and higher availability, database systems have moved from centralized to distributed architectures, and the research in multilevel secure distributed database management systems (MLS/DDBMS) is gaining more and more prominence. Traditional transaction management protocols (i.e., concurrency control and commit protocols) are important components of database systems. The most important issues for these protocols in MLS database systemare the covert channel problem[2] and starvation of high security level transactions [10]. To address these problems, first we propose new correctness criteria for multilevel secure multiversion concurrency control protocol, called read-down conflict serializability. It is the extended definition of one-copy serial (or1-serial) that allows a transaction to read older versions, if necessary. If a concurrency control protocol allows transaction to read older versions, we can obtain better throughput and response time than the traditional multiversion concurrency control protocols. We show that multiversion schedule based upon proposed criteria is also one-copy serializable. Secondly, this paper proposes a secure multiversion concurrency control protocol for MLS/DDBMSs that is only free from covert channels but also do so without starving high security level transactions, in addition to ensure the proposed serializability. Further, in distributed database systems, an atomic commitment protocol is needed to terminate distributed transactions consistently. To meet MLS requirements and to avoid database inconsistencies 2PC commit protocol is also modified.