TCB subsets: the next step

Author

Vetter, Linda ; Smith, Gordon ; Lunt, Teresa F.

Author_Institution

Oracle Corp., San Mateo, CA, USA

fYear

1989

fDate

4-8 Dec 1989

Firstpage

216

Lastpage

221

Abstract

The advantages of TCB (trusted computing base) subsetting for building multilevel database systems are discussed, and the architectural impact on the database system when the TCB subsetting approach is used in a real implementation is described. Particular attention is given to such areas of difficulty as concurrency controls, recovery management, and buffer management. In discussing implications for the architecture of the database system, it is noted that the standard ORACLE database system already supports those architectural features that are required, and ORACLE is proceeding with product development and product evaluation projects to extend the promise of TCB subsetting to commercially available ORACLE RDBMS (relational database management system) products on a wide variety of platforms. The SeaView prototype takes advantage of the architectural features of ORACLE with a TCB subsetting approach to achieve a class A1 system that reuses existing TCB and database technology

Keywords

relational databases; security of data; storage management; ORACLE; SeaView prototype; TCB subsets; architectural impact; buffer management; concurrency controls; multilevel database systems; product development; product evaluation projects; real implementation; recovery management; relational database management system; trusted computing base; Computer architecture; Computer science; Computer security; Concurrency control; Data security; Database systems; Kernel; Laboratories; Operating systems; Relational databases;

fLanguage

English

Publisher

ieee

Conference_Titel

Computer Security Applications Conference, 1989., Fifth Annual

Conference_Location

Tucson, AZ

Print_ISBN

0-8186-2006-4

Type

conf

DOI

10.1109/CSAC.1989.81053

Filename

81053