A Kernelized Architecture for Multilevel Secure Object-Oriented Databases Supporting Write-Up

This paper presents a kernelized architecture (i.e., an architecture in which no subject is exempted from the simple-security and ?-properties) for multilevel secure (mls) objectoriented database management systems (DBMS's) which support write-up. Relational mls DBMS's typically do not allow write-up, due to integrity problems arising from the blind nature of write-up operations in these systems. In object-oriented DBMS's, on the other hand, sending messages upwards in the security lattice does not present an integrity problem because such messages will be processed by appropriate methods in the destination object. However, supporting write-up operations in object-oriented systems is complicated by the fact that such operations are no longer primitive; but can be arbitrarily complex and therefore can take arbitrary amounts of processing time. We focus on support for remote procedure call (RPC) based write-up operations. Dealing with the timing of such write-up operations consequently h..