Multilevel secure databases: a new approach

An examination is given of the relationship between the commercial INGRES relational database management system (DBMS) and the Unix operating system with a view toward determining its applicability to supporting the requirements for a class B1 system as defined in the trusted computer system evaluation criteria. The authors propose a security policy that provides database security in a multilevel environment and aims at a secure DBMS through the retrofit of security controls into the existing system. They also detail some of the fundamental security requirements and functions of INGRES that can be exploited to enhance its security features.<
>