A Two Snapshot Algorithm for Concurrency Control in Multi-Level Secure Databases

  • Authors:
  • Paul Ammann;Frank Jacckle;Sushi Jajodia

  • Affiliations:
  • -;-;-

  • Venue:
  • SP '92 Proceedings of the 1992 IEEE Symposium on Security and Privacy
  • Year:
  • 1992

Quantified Score

Hi-index 0.00

Visualization

Abstract

We offer a concurrency control algorithm for replicated, secure, multi-level databases. In secure databases, single copy techniques can not avoid indirect channels withoutsubjecting high level transactions to starvation due to malicious low level processes. However, multi-version and replicated databases can avoid starvation problems without introducing indirect channels by maintaining stable copies of old low level data values for use by high level transactions. The algorithm presented here improves on two comparable techniques, a direct multi-version approach of Keefe and Tsai [10] and full replicationscheme of Jajodla and Kogan [9]. In the latter, each security level has a container that holds a copy of all lower level data. This paper shows that only a constant number of old copies - two, as it turns out - need be maintained. We argue correctness of our algorithmanddemonstrate that the algorithm is free of indirect channels andstarvation.