(Enter summary)
Abstract: In this paper, we survey the security of coventional databases and object-oriented databases
that have been reported in the current literature. This is an area of substantial interest in
databases because (1) the use of databases is becoming very important in today's enterprises,
(2) databases contain information that is a major enterprise asset. Security concerns,
requirements, and problems that arise in the pursuit of meeting these requirements for security
in databases are illustrated. We... (Update)
Context of citations to this paper: More
.... Traditional database security policies rely on user authentication, communication encryption and serverenforced access controls [BPS96]. Unfortunately, these mechanisms are inoperative against most insider attacks and particularly against database administrator attacks....
Cited by: More
Semantic Access Control Model: A Formal Specification - Yagüe, Gallardo, Mana (2005)
(Correct)
Mobile Databases: a Report on Open Issues and Research.. - Action Members Epfl
(Correct)
Chip-Secured Data Access: Confidential Data on Untrusted.. - Bouganim, Pucheral (2002)
(Correct)
Active bibliography (related documents): More All
2.9: Inference and Aggregation Issues In Secure Database Management.. - ?
(Correct)
2.8: A Security Model for Multi-level Object-Oriented.. -.. (1996)
(Correct)
1.7: A Cryptographic Solution to Discretionary Access.. -.. (1994)
(Correct)
Similar documents based on text: More All
0.4: A Cryptographic Mechanism for.. -.. (1995)
(Correct)
0.3: A Model of Content-based Authorization in.. -.. (1995)
(Correct)
0.3: A Practical Electronic Voting Protocol Using Threshold .. - Baraani-Dastjerdi.. (1994)
(Correct)
Related documents from co-citation: More All
2: PicoDBMS: Scaling down Database Techniques for the Smartcard
- Bobineau, Bouganim et al. - 2000
2: Advanced Security Administrator Guide (context) - Corp - 2000
BibTeX entry: (Update)
A. Baraani, J. Pieprzyk, R. Safavi-Naini "Security In Databases: A Survey Study", 1996. citeseer.nj.nec.com/baraani-dastjerdi96security.html http://citeseer.ist.psu.edu/baraani-dastjerdi96security.html More
@misc{ baraani96security,
author = "A. Baraani and J. Pieprzyk and R. Safavi-Naini",
title = "Security In Databases: A Survey Study",
text = "A. Baraani, J. Pieprzyk, R. Safavi-Naini Security In Databases: A Survey
Study, 1996. citeseer.nj.nec.com/baraani-dastjerdi96security.html",
year = "1996",
url = "citeseer.ist.psu.edu/baraani-dastjerdi96security.html" }
Citations (may not include all citations):
265
Secure Computer System: Unified Exposition and Multic Interp.. (context) - Bell, LaPadula - 1976
244
Cryptography and Data Security (context) - Denning - 1983 ACM DBLP
173
A Comparison of Commercial and Military Computer Security Po.. (context) - Clark, Wilson - 1987 DBLP
133
IEEE Transactions on Software Engineering (context) - Denning, Akl et al. - 1987
124
Protection in Operating Systems (context) - Harrison, Ruzzo et al. - 1976 ACM DBLP
122
Data Model Issues for Object-Oriented Applications (context) - Banerjee, Chou et al. - 1987 ACM DBLP
118
Role-based Access Controls
- Ferrailo, Kuhn - 1992 ACM
107
Database Security (context) - Castano, Fugini et al. - 1995 ACM DBLP
104
Communications of the ACM (context) - Deux, System - 1991
85
Security-Control Methods for Statistical Databases: A Compar.. (context) - Adam, Wortmann - 1989 ACM DBLP
82
Department of Defense Trusted Computer System Evaluation Cri.. (context) - Defense - 1985
69
A Model of Authorization for NextGeneration Database Systems (context) - Rabitti, Bertino et al. - 1991
69
Object-Oriented Databases: Definition and Research Direction.. (context) - Kim - 1990 DBLP
52
The Typed Access Matrix Model
- Sandhu - 1992
51
Security in Computing (context) - Pfleeger - 1989
49
Features of The ORION Object-Oriented Database System (context) - Kim, Ballou et al. - 1987 ACM DBLP
34
Polyinstantiation Integrity in Multilevel Relations Revisite..
- Jajodia, Sandhu - 1991 DBLP
29
Separation of Duties in Computerized Information Systems
- Sandhu - 1991
27
Protection- principles and practice (context) - Graham, Denning - 1972
26
A Multilevel Relational Data Model (context) - Denning, Lunt - 1987 DBLP
25
Detection and Elimination of Inference Channels in Multileve.. (context) - Qian, Stickel et al. - 1993
25
Integrating an Object-Oriented Data Model with Multilevel Se.. (context) - Jajodia, Kogan - 1990 DBLP
25
Computer Security Basic (context) - Russell, Gangemi - 1991
24
IEEE Transactions on Software Engineering (context) - Lunt, Denning et al. - 1990
23
IEEE Transactions on Knowledge and Data Engineering (context) - Wilkinson, Lyngbaek et al. - 1990
22
CRYPTOGRAPHY: An Introduction to Computer Security (context) - Seberry, Pieprzyk - 1989
22
The LDV Secure Relational DBMS Model (context) - Haigh, O'Brien et al. - 1991 DBLP
21
Inference Aggregation Detection in Database Management Syste.. (context) - Hinke - 1988
21
Transaction Processing in Multilevel Secure Databases Using .. (context) - Jajodia, Kogan - 1990
20
Cryptographic Protocols for Distributed Systems (context) - Gong - 1990
20
Conceptual Foundations for a Model of Taskbased Authorizatio..
- Thomas, Sandhu - 1994
19
The Specification and Modeling of Computer Security
- Mclean - 1990
19
Information Technology Security Evaluation Criteria (context) - the, Communities - 1992
18
Access Control Policies For Database Systems (context) - Lunt - 1989 DBLP
17
Aggregation and Inference: Facts and Fallacies (context) - Lunt - 1989
15
Commutative Filters for Reducing Inference Threats in Multil.. (context) - Denning - 1985
15
Mandatory Security in Object-Oriented Database Systems (context) - Thuraisingham - 1989
14
IEEE Communications Magazine (context) - Sandhu, Samarati et al. - 1994
13
Cryptographic Implementation of A Tree Hierarchy For Access .. (context) - Sandhu - 1988
13
The Use of Conceptual Structures for Handling The Inference .. (context) - Thuraisingham - 1992
13
The Extended Schematic Protection Model (context) - Ammann, Sandhu - 1992
13
A Novel Decomposition of Multilevel Relations into Single-le..
- Jajodia, Sandhu - 1991 DBLP
13
Design of LDV: A Multilevel Secure Relational Database Manag.. (context) - Stachour, Thuraisingham - 1990
12
Security for Object-Oriented Database Systems (context) - Millen, Lunt - 1992
12
User Group Structures in Object-Oriented Database Authorizat.. (context) - Fernandez, Wu et al. - 1994 ACM DBLP
12
Data Hiding and Security in Object-Oriented Databases (context) - Bertino - 1992 ACM DBLP
12
A Cryptographic Key Generation Scheme for Multilevel Data Se.. (context) - Harn, Lin - 1990 ACM
12
The Canadian Trusted Computer Product Evaluation Criteria (context) - Security, Security et al. - 1993
12
A Model of Authorization for Object-Oriented and Semantic Da.. (context) - Rabitti, Woelk et al. - 1988
12
Discretionary Access Control in Structurally Object-Oriented.. (context) - Dittrich, Hartig et al. - 1989 DBLP
11
Cryptographic Solution To A Multilevel Security Problem (context) - Akl, Taylor - 1983 DBLP
11
A Taxonomy for Secure Object-Oriented Databases (context) - Olivier, Von Solms - 1993
11
Modeling Security-Relevant Data Semantics (context) - Smith - 1990
10
Expressive Power of the Schematic Protection Model
- Sandhu - 1992
10
the Problem of Security in Databases (context) - Wiseman - 1990
9
Inference Through Secondary Path Analysis (context) - Binns - 1993 ACM DBLP
9
Implementing Transaction Control Expressions by Checking for..
- Ammann, Sandhu - 1992
9
Secure Query Processing Strategies (context) - Keefe, Thuraisingham et al. - 1989
8
Database Inference Controller (context) - Buczkowski - 1990 DBLP
8
A Multilevel Security Model For Object-Oriented Systems (context) - Keefe, Tsai et al. - 1988
8
A User-Role Based Data Security Approach (context) - Ting - 1988
7
AERIE: An Inference Modeling and Detection Approach For Data.. (context) - Hinke, Delugach - 1993 DBLP
7
Security Checking in Relational Database Management System A.. (context) - Thuraisingham - 1987
7
Prototyping the SODA Security Model (context) - Keefe, Tsai - 1990
7
Multilevel Security for Object-Oriented Database Systems (context) - Lunt - 1990
7
Toward a Tool to Detect and Eliminate Inference Problems in .. (context) - Garvey, Lunt et al. - 1993 ACM DBLP
7
Supporting Access Control in an Object-Oriented Database Lan.. (context) - Ahad, davis et al. - 1992 ACM DBLP
7
Views as the Security Objects in a Multilevel Secure Relatio.. (context) - Wilson - 1988
6
Access Controls in Object-Oriented Database Systems: Some Ap.. (context) - Bertino, Jojodia et al. - 1993
6
Toward a Multilevel Relational Data Model (context) - Jajodia, Sandhu - 1991
6
A New Authorization Model for Object-Oriented Databases (context) - Bertino, Origgi et al. - 1994 ACM DBLP
6
and Functionalities of User-Role Based Security for an Objec.. (context) - Ting, Demurjian et al. - 1992
6
A Multilevel Transaction Problem for Multilevel Secure Datab..
- Costich, McDermott - 1992
6
The Impact of Inheritance On Security In Object-Oriented Dat..
- Spooner - 1989
6
Security Policies in Object-Oriented Databases (context) - Larrondo-Petrie, Guides et al. - 1990
5
Object-Oriented Database Systems: The Notations and Issues (context) - Dittrich - 1986
5
Discretionary Access Control in Object-Oriented Database: Is..
- Thomas, Sandhu - 1993
5
DAMOKLES - The Database System for the UNIBASE Software Engi.. (context) - Dittrich, Gotthard et al. - 1987 DBLP
5
ASD-Views (context) - Garvey, Wu - 1988
5
Discretionary Access Control in Object-Oriented Engineering .. (context) - Faatz, Spooner - 1991 DBLP
5
and Instancebased Authorization in Object-Oriented Databases (context) - Gudes, Song et al. - 1991
5
A Three TIER Architecture for Role-Based Access Control
- Sandhu, Feinstein - 1994
5
An Approach to Authorization Modeling in Object-Oriented Dat.. (context) - Bertino, Weigand - 1994 ACM DBLP
4
ONTOS Reference Manual (context) - Inc, Massachusetts - 1989
4
Inference Secure Multilevel Databases (context) - Lin - 1993 ACM DBLP
4
Objectivity Database System Overview (context) - Inc, Park - 1990
4
SMALLTALK-80 The Language and Implementation (context) - Goldberg, Robson - 1983
3
Database Security (context) - Lunt, Fernandez - 1990
3
Cryptographic Checksums for Multilevel Database Security (context) - Denning - 1984 DBLP
3
Computer Access Control Policy Choices (context) - Olson, Marshall - 1990
3
Modeling Multilevel Entities Using Single Level Objects (context) - Bertino, Jajodia - 1993 DBLP
3
Complex Entities for Engineering Applications (context) - Dittrich, Gotthard et al. - 1987 ACM DBLP
3
A New Model for Role-based Access Control (context) - Giuri - 1995
3
VERSANT Technical Overview (context) - Technologies, Menlo et al. - 1990
3
Data Base Architectonics and Inferential Security (context) - Sowerbutts, Cordingley - 1991
3
Multilevel Security in Database Management Systems (context) - Dwyer, Jelatis et al. - 1987 DBLP
2
Department of Computer Science (context) - Nyanchama, Integrity et al. - 1994
2
Wilson Integrity Policy Using Current Technology (context) - Shockley, Clark - 1988
2
The SeaView Prototype: Project Summary (context) - Lunt, Boucher - 1994
2
An Interpretation of Clark-Wilson for Object-Oriented DBMSs (context) - Herndon - 1994 ACM DBLP
2
Research Issues in Discretionary Authorizations for Object B.. (context) - Bertino, Samarati - 1993 DBLP
2
Inference and Cover Stories (context) - Binns - 1993 ACM DBLP
2
A Model Logic Framework to Solve Aggregation Problems (context) - Cuppens - 1992
2
Decomposition of Multilevel Objects in an Object-Oriented Da.. (context) - Boulahia-Cuppens, Cuppens et al. - 1994 ACM DBLP
2
The LDV Approach to Database Security (context) - Haigh, O'Brien et al. - 1990 DBLP
2
Towards the Design of a Secure Data/Knowledge Base Managemen.. (context) - Thuraisingham - 1990
2
A Multilevel Secure Database Management System Benchmark (context) - Schlipper, Filsinger et al. - 1992
2
Constructing Containers Using A Multilevel Relational Data M.. (context) - Meadows - 1990
2
Security Model Consistency in Secure Object-Oriented Systems (context) - Keefe, Tsai - 1989
1
An Authorization Model for a Shared Database (context) - Fernandez, Summers et al. - 1975
1
AddisonWesley Publishing Company (context) - Fernandez, Summers et al. - 1981
1
Role-Based Access Control (context) - Ferrailo, Cugini et al. - 1995 ACM
1
Role-Based Access Control Position Paper (context) - Abrams - 1994
1
The Trouble with Secure Database (context) - Wiseman - 1989
1
Virtual View Model to Design a Secure Object-Oriented Databa.. (context) - Boulahia-Cuppens, Cuppens et al. - 1994
1
Distributed Concurrency Control with Optional Data Replicati.. (context) - McCollum, Notargiacomo - 1992
1
Tree Hierarchy and Its Application to Protection Groups (context) - Sandhu, in - 1989
1
An Extended Cryptographic Key Generation Scheme For Multilev.. (context) - Harn, Chien et al. - 1990
1
Multivalued Dependency Inference in Multilevel Relational Da.. (context) - Su - 1990
1
the Implementation of Security Measures in Information Syste.. (context) - Conway, Maxwell et al. - 1974
1
Transaction Processing Using an Untrasted Scheduler in a Mul.. (context) - Costich - 1992
1
Applications of Cryptography for the Security of Database an.. (context) - Hardjono - 1991 ACM
1
Query Modifications as Means of Controlling Accesses to Mult.. (context) - Hsiao, Kohler et al. - 1991
1
Secure DBMS Design (context) - Hinke, Garvey et al. - 1988
1
Recent Developments in Database Security (context) - Thuraisingham - 1989
1
Prototyping as a Research Tool for MLS/DBMS (context) - Thomsen, Tsai et al. - 1989
1
The Application of Cryptography for Database Security (context) - Gudes, Koch et al. - 1976
1
Design Overview for Retrofitting Integrity-lock Architecture.. (context) - Graubart, Duffy - 1985
1
Secure Object-Oriented Databases (context) - Olivier - 1991
1
A Cryptographic Implementation for Dynamic Access Control in.. (context) - Tsai, Chang - 1995
1
Role-Based Access Control: A position Statement (context) - Sandhu - 1994
1
Using THETA to Implement Access Control for Separation of Du.. (context) - Pascale, Enerney - 1994
1
Referential Integrity in Multilevel Security Databases (context) - Sandhu, Jajodia - 1993
1
Cryptographic Relational Algebra (context) - Davida, Yeh - 1982
1
A Model of Integrity and Dynamic Separation of Duty for a Tr.. (context) - Notargiacomo, Blaustein et al. - 1994
1
A Security Model for Multilevel Object With Bidirectional Re.. (context) - Morgenstern - 1991
1
and Implementations (context) - Bell, Policies - 1990
1
A Security Model for Multi-level Object-Oriented Databases B.. (context) - Baraani-Dastjerdi, Pieprzyk et al. - 1996
1
Recovery Management for Multilevel Secure Database Systems (context) - Kang, Keefe - 1993
1
Annual Reviews Inc (context) - Denning - 1988
Documents on the same site (http://www.cs.uow.edu.au/people/josef/PUB/pub.html): More
Cryptographic Hash Functions: A Survey - Bakhtiari, Safavi-Naini, Pieprzyk (1995)
(Correct)
Soviet Encryption Algorithm - From Russian
(Correct)
Linear Approximation Versus Nonlinearity - Pieprzyk, Charnes, Seberry (1994)
(Correct)
Online articles have much greater impact More about CiteSeer.IST Add search form to your site Submit documents Feedback
CiteSeer.IST - Copyright Penn State and NEC