Maintaining correctness, availability, and unambiguity in trusted database management systems

The various kinds of threats to integrity and security that arise in multilevel secure database systems are examined. The authors consider the various kinds of integrity constraints on a database and describe the conflicts between security and the various general integrity properties. They then consider an example of a trusted DBMS (database management system), in the spirit of R. Burns' 'homework problem' (1988) in the RADC database security workshop, to illustrate how the problem of conflict between integrity and the requirements of trusted databases may arise, and how it may be minimized. In each case, they discuss the tradeoffs between correctness, availability, and unambiguity, and how they affect recoverability.<
>