Databases Reference
In-Depth Information
because it provides more sophisticated access control mechanisms, it is likely
to be capable of addressing some additional real-world access control needs.
11.4.3 Prototypes
This section examines two prominent research prototypes that were designed
in the late 1980s: SRIs SeaView and Honeywells LOCK Data Views
(LDV). Both are based on the extended-kernel approach. Many of the
MLS/DBMS products discussed in this chapter have been heavily influenced
by those two systems. Other MLS/DBMSs designed in the 1980s and the
early 1990s include ASD-Views by TRW, integrity-lock prototypes by
MITRE, Secure Distributed Database Systems by Unisys, SINTRA by Naval
Research Laboratory, and SWORD by Defense Research Agency. Note that
in describing SeaView and LDV, we discuss the design of the initial systems.
Table 11.2 classifies the various prototypes and products according to
the design on which they are based. A discussion of some of these prototypes
and products is given in the following sections. Since most multilevel object
models also include policies for method execution, we have not considered
them in this classification. There is no taxonomy yet for multilevel object
systems.
11.4.3.1 SeaView
SeaView, which is an MLS relational DDBMS hosted on GEMSOS Trusted
Computing Base (TCB), addresses the multilevel secure needs by enabling
individuals possessing a range of clearances to create, share, and manipulate
relational DBs that contain information spanning multiple sensitivity levels.
Its designers goal was to develop a high-assurance MLS/DBMS. The project
Table 11.2
Classification of Products and Prototypes Based on Their Architecture
Architecture
Prototypes and Products
Single kernel
Hinke-Schaefer, SeaView, Oracle (based on Hinke-Schaefer)
Distributed
Unisyss Secure Distributed Database, Naval Research Laboratorys SINTRA
Trusted subject
TRWs ASD-Views, Secure Sybase, Trusted Oracle (based on trusted
subject), Trusted Informix
Integrity lock
MITRE prototypes, TRUDATA
Extended kernel
Honeywells LDV
