Implementation design for a kernelized trusted DBMS

The implementation design of the Mitre kernelized trusted database management system (TDBMS) prototype is described. The prototype is intended to be a compartmented-mode DBMS, based on the Naval Surveillance DBMS security model. The TDBMS has been implemented by retrofitting security functionality onto the Mistress commercial database product. The TDBMS security kernel controls read and write access to the database. Mandatory access control is provided down to the data element level of granularity. The prototype supports a set of interactive user-supplied database commands. The TDBMS runs as an application on the prototype Mitre compartment mode workstation (CMW), and has incorporated much of the available CMW security functionality