Merging heterogeneous security orderings

Issue title: ESORICS '96

Article type: Research Article

Authors: Bonatti, P.A.^a | Sapino, M.L.^a | Subrahmanian, V.S.^b

Affiliations: [a] Università di Torino, Italy, E-mail: bonatti@di.unito.it, mlsapino@di.unito.it | [b] University of Maryland, USA, E-mail: vs@cs.umd.edu

Abstract: The problem of integrating multiple heterogeneous legacy databases is an important problem. Many papers [3,7,9] to date on this topic have assumed that all the databases comprising a mediated/federated system share the same security ordering. This assumption is often not true as the databases may have been developed independently by different agencies at different points in time. In this paper, we present techniques by which we may merge multiple security orderings into a single unified ordering that preserves the security relationships between orderings. We present a logic programming based approach, as well as a graph theoretical approach to this problem.

Keywords: Theoretical foundations of security, heterogeneous mediated/federated systems

DOI: 10.3233/JCS-1997-5102

Journal: Journal of Computer Security, vol. 5, no. 1, pp. 3-29, 1997