language: en

Toward a MAC policy framework

Xiaolei Qian Teresa F. Lunt
SRI International ARPA/ITO
333 Ravenswood Avenue 3701 North Fairfax Drive Menlo Park, CA 94025 Arlington, VA 22203
qian@csl.sri.com tlunt@arpa.mil

Abstract We propose a formal policy framework of MAC policies in multilevel relational databases. We identify the important components of such policies and their desirable properties. The framework provides a basis for systematically specifying such policies and characterizing their potential mismatches. Based on the framework, we compare and unify the MAC policies and policy components that are proposed in the literature or imposed in existing systems. Our framework could be used to capture and resolve MAC policy mismatches in the trusted interoperation of heterogeneous multilevel relational databases.

Keywords Heterogeneity, interoperation, mandatory access control, multilevel security, relational database, security policy

1 INTRODUCTION