rick mancuso. paper information title: secure concurrency protocol with timeliness guarantees in...
TRANSCRIPT
CONCURRENCY AND SECURITY
Rick Mancuso
Paper Information
Title: Secure concurrency protocol with timeliness guarantees in real-time database systems.
Authors: Ying Yuan Xiao, Kevin Lu
Journal: Mathematical and Computer Modelling
Accepted: January 5, 2011
Background
Bell-LaPadula Concurrency control covert channel Priority Inversion
Related Work
Secure real-time two phase lockingDoes not solve priority inversion
George and HaritsaDoes not maximize security AND real-time
requirements Other examples
Fall victim to one or both of the above
Secure Real-Time Concurrency Control (SRCC)
Rule 1
Algorithm
Enhanced SRCC (ESRCC) SRCC can sacrifice real-time performance ESRCC solves this through Similarity
Algorithm
Testing
Testing
Testing
Testing
Testing