Secure object deletion and garbage collection in multilevel object bases¹

Article type: Research Article

Authors: Bertino, Elisa | Ferrari, Elena

Affiliations: Dipartimento di Scienze dell’Informazione, Università degli Studi di Milano, Via Comelico 39/41, 20135 Milano, Italy. E-mail: bertino@dsi.unimi.it, ferrarie@dsi.unimi.it

Note: [1] A preliminary version of this paper appeared under the title “A principled approach to object deletion and garbage collection in multilevel secure object bases”, in: Proceedings of the 11th Annual IFIP Working Conference on Database Security, Lake Tahoe, CA, August 1997.

Abstract: This paper introduces guidelines aiming at the prevention of illegal information flows due to object deletion in multilevel secure object database management systems (ODBMSs). Although a delete operation can be viewed as a kind of write operation, this does not suffice to avoid covert channels. Hence, the attention is focused on delete operation and its implications on database security. The guidelines we propose are formally stated as security principles. We also show how to design a garbage collection mechanism in a multilevel secure ODBMS. The garbage collection mechanism ensures both security and referential integrity.

DOI: 10.3233/JCS-1999-7402

Journal: Journal of Computer Security, vol. 7, no. 4, pp. 257-285, 1999