Building a Secure Database using Self-protecting Objects

Olivier and von Solms

1992

Citation information

Abstract

In current database systems the responsibility for enforcing security is often given to the various application programs. Even where the Database Management System (DBMS) does supply security mechanisms, a single application program often handles sensitive transactions for some users and therefore needs a high clearance for accessing data—this may render the provided mechanisms inadequate. Furthermore, the user’s identity is often blurred because the user has many ‘software agents’ acting on its behalf—especially in distributed environments. A simple mapping between subjects and objects is no longer possible.

This paper proposes a model for extending Object-Oriented Database Systems to enable objects themselves to ensure security—ie to protect themselves. This extension is based on the concept of ‘baggage’—baggage is collected from all components involved in any request; this baggage may then be verified by the object against its personal security profile before any method is executed.

Full text

Definitive version

BibTeX reference