{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2022,12,28]],"date-time":"2022-12-28T21:26:41Z","timestamp":1672262801115},"reference-count":78,"publisher":"Elsevier","content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[1994]]},"DOI":"10.1016\/s0065-2458(08)60175-8","type":"book-chapter","created":{"date-parts":[[2011,1,19]],"date-time":"2011-01-19T00:56:15Z","timestamp":1295398575000},"page":"1-72","source":"Crossref","is-referenced-by-count":11,"title":["Database Security"],"prefix":"10.1016","author":[{"given":"G\u00fcnther","family":"Pernul","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"78","reference":[{"key":"10.1016\/S0065-2458(08)60175-8_bib1","series-title":"Conceptual Database Design: An Entity-Relationship Approach.","author":"Batini","year":"1992"},{"key":"10.1016\/S0065-2458(08)60175-8_bib2","series-title":"Technical Report MTR-2997.","article-title":"Secure Computer System: Unified Exposition and Multics Interpretation.","author":"Bell","year":"1976"},{"key":"10.1016\/S0065-2458(08)60175-8_bib3","author":"Biba","year":"1977"},{"key":"10.1016\/S0065-2458(08)60175-8_bib4","article-title":"A General Framework for Database Security.","volume":"90","author":"Biskup","year":"1990"},{"key":"10.1016\/S0065-2458(08)60175-8_bib5","article-title":"The Personal Model of Data: Towards a Privacy-Oriented Information System.","volume":"7","author":"Biskup","year":"1988"},{"key":"10.1016\/S0065-2458(08)60175-8_bib6","article-title":"The Personal Model of Data: Towards a Privacy-Oriented Information System (extended abstract)","author":"Biskup","year":"1989"},{"key":"10.1016\/S0065-2458(08)60175-8_bib7","article-title":"Das datenschutzorientierte Informationssystem DORIS: Stand der Entwicklung und Ausblick.","volume":"271","author":"Biskup","year":"1991"},{"key":"10.1016\/S0065-2458(08)60175-8_bib8","article-title":"A Conceptual Model for Multilevel Database Design.","author":"Burns","year":"1992","journal-title":"Proc. 5th Rome Laboratory Database Workshop"},{"issue":"1","key":"10.1016\/S0065-2458(08)60175-8_bib9","doi-asserted-by":"crossref","DOI":"10.1145\/320434.320440","article-title":"The Entity Relationship Model: Towards a Unified View of Data.","volume":"1","author":"Chen","year":"1976","journal-title":"ACM Trans. Database Systems (TODS)"},{"key":"10.1016\/S0065-2458(08)60175-8_bib10","doi-asserted-by":"crossref","DOI":"10.1109\/SP.1987.10001","article-title":"A Comparison of Commercial and Military Computer Security Policies.","author":"Clark","year":"1987"},{"issue":"6","key":"10.1016\/S0065-2458(08)60175-8_bib11","doi-asserted-by":"crossref","DOI":"10.1145\/362384.362685","article-title":"A relational model for large shared data banks.","volume":"13","author":"Codd","year":"1970","journal-title":"Comm. ACM"},{"key":"10.1016\/S0065-2458(08)60175-8_bib12","doi-asserted-by":"crossref","DOI":"10.1109\/RISP.1992.213254","article-title":"A \u201cNatural\u201d Decomposition of Multi-level Relations.","author":"Cuppens","year":"1992"},{"key":"10.1016\/S0065-2458(08)60175-8_bib13","first-page":"3","article-title":"Database Security.","author":"Denning","year":"1988","journal-title":"Ann. Rev. Comput. Sci."},{"key":"10.1016\/S0065-2458(08)60175-8_bib14","doi-asserted-by":"crossref","DOI":"10.1109\/SP.1987.10023","article-title":"A multilevel relational data model.","author":"Denning","year":"1987"},{"key":"10.1016\/S0065-2458(08)60175-8_bib15","article-title":"The Sea View Security Model.","author":"Denning","year":"1988"},{"key":"10.1016\/S0065-2458(08)60175-8_bib16","series-title":"Fundamentals of Database Systems.","author":"Elmasri","year":"1989"},{"key":"10.1016\/S0065-2458(08)60175-8_bib17","series-title":"Database Security and Integrity.","author":"Fernandez","year":"1981"},{"key":"10.1016\/S0065-2458(08)60175-8_bib18","doi-asserted-by":"crossref","DOI":"10.1109\/SECPRI.1989.36285","article-title":"A Security Model for Object-Oriented Databases.","author":"Fernandez","year":"1989"},{"key":"10.1016\/S0065-2458(08)60175-8_bib19","article-title":"A Model for Evaluation and Administration of Security in Object-Oriented Databases.","author":"Fernandez","year":"1993","journal-title":"IEEE Trans. Knowledge and Data Engineering (forthcoming)"},{"key":"10.1016\/S0065-2458(08)60175-8_bib20","article-title":"Secure Database Development Methodologies.","author":"Fugini","year":"1988"},{"key":"10.1016\/S0065-2458(08)60175-8_bib21","article-title":"ASD_Views.","author":"Garvey","year":"1988"},{"key":"10.1016\/S0065-2458(08)60175-8_bib22","article-title":"Protection Principles and Practices.","author":"Graham","year":"1972","journal-title":"Proc. AFIPS Spring Joint Computer Conference."},{"issue":"3","key":"10.1016\/S0065-2458(08)60175-8_bib23","doi-asserted-by":"crossref","DOI":"10.1145\/320473.320482","article-title":"An authorization mechanism for a relational database system.","volume":"1","author":"Griffiths","year":"1976","journal-title":"ACM Trans. Database Systems (TODS)"},{"key":"10.1016\/S0065-2458(08)60175-8_bib24","author":"Haigh","year":"1990"},{"issue":"8","key":"10.1016\/S0065-2458(08)60175-8_bib25","doi-asserted-by":"crossref","DOI":"10.1145\/360303.360333","article-title":"Protection in operating systems.","volume":"19","author":"Harrison","year":"1976","journal-title":"Comm. ACM"},{"key":"10.1016\/S0065-2458(08)60175-8_bib26","article-title":"Al Secure DBMS Architecture.","author":"Hinke","year":"1992"},{"issue":"90","key":"10.1016\/S0065-2458(08)60175-8_bib27","first-page":"314","article-title":"Information Technology Security Evaluation Criteria (ITSEC)","year":"1991","journal-title":"Provisional Harmonized Criteria, COM"},{"key":"10.1016\/S0065-2458(08)60175-8_bib28","doi-asserted-by":"crossref","DOI":"10.21236\/ADA224491","article-title":"Integrating an Object-Oriented Data Model with Multilevel Security.","author":"Jajodia","year":"1990"},{"issue":"4","key":"10.1016\/S0065-2458(08)60175-8_bib29","article-title":"Database Security: Current Status and Key Issues.","volume":"19","author":"Jajodia","year":"1990","journal-title":"ACM SIGMOD Record"},{"key":"10.1016\/S0065-2458(08)60175-8_bib30","doi-asserted-by":"crossref","DOI":"10.1109\/RISP.1990.63843","article-title":"Polyinstantiation Integrity in Multilevel Relations.","author":"Jajodia","year":"1990"},{"key":"10.1016\/S0065-2458(08)60175-8_bib31","article-title":"Update Semantics of Multilevel Secure Relations.","author":"Jajodia","year":"1990"},{"key":"10.1016\/S0065-2458(08)60175-8_bib32","series-title":"Proc. ACM SIGMOD Conf.","article-title":"Toward a multilevel secure relational data model.","author":"Jajodia","year":"1991"},{"key":"10.1016\/S0065-2458(08)60175-8_bib33","doi-asserted-by":"crossref","DOI":"10.1109\/RISP.1991.130797","article-title":"A Novel Decomposition of Multilevel Relations into Single-Level Relations.","author":"Jajodia","year":"1991"},{"key":"10.1016\/S0065-2458(08)60175-8_bib34","series-title":"Proc. 5th IFIP WG 11.3 Conf. Database Security.","article-title":"Effects of the Sea View decomposition of multilevel relations on database performance.","author":"Jajodia","year":"1991"},{"key":"10.1016\/S0065-2458(08)60175-8_bib35","article-title":"On Transaction Processing for Multilevel Secure Replicated Databases.","volume":"648","author":"Kang","year":"1992"},{"key":"10.1016\/S0065-2458(08)60175-8_bib36","series-title":"Proc. 6th IFIP WG 11.3 Conf. on Database Security.","article-title":"Recovery Management for Multilevel Secure Database Systems.","author":"Kang","year":"1992"},{"key":"10.1016\/S0065-2458(08)60175-8_bib37","first-page":"5","article-title":"Soda\u2014A secure Object-Oriented Database System.","volume":"8","author":"Keefe","year":"1989"},{"key":"10.1016\/S0065-2458(08)60175-8_bib38","series-title":"Proc. ACM SIGMOD Conf.","article-title":"Concurrency Control in Multilevel Secure Databases using the Replicated Architecture.","author":"Kogan","year":"1990"},{"key":"10.1016\/S0065-2458(08)60175-8_bib39","author":"Lampson","year":"1971","journal-title":"Protection. Proc. 5th Princeton Conf. Information and Systems Sciences."},{"issue":"10","key":"10.1016\/S0065-2458(08)60175-8_bib40","doi-asserted-by":"crossref","DOI":"10.1145\/362375.362389","article-title":"A Note on the Confinement Problem.","volume":"16","author":"Lampson","year":"1973","journal-title":"Comm. ACM"},{"issue":"3","key":"10.1016\/S0065-2458(08)60175-8_bib41","doi-asserted-by":"crossref","DOI":"10.1145\/356850.356852","article-title":"Formal Models of Computer Security.","volume":"13","author":"Landwehr","year":"1981","journal-title":"ACM Comp. Surveys"},{"key":"10.1016\/S0065-2458(08)60175-8_bib42","doi-asserted-by":"crossref","DOI":"10.1109\/ACSAC.1988.113420","article-title":"Toward a multilevel relational data language.","author":"Lunt","year":"1988"},{"issue":"6","key":"10.1016\/S0065-2458(08)60175-8_bib43","article-title":"The Sea View Security Model.","volume":"16","author":"Lunt","year":"1990","journal-title":"IEEE Trans. Software Engineering (ToSE)"},{"issue":"4","key":"10.1016\/S0065-2458(08)60175-8_bib44","doi-asserted-by":"crossref","DOI":"10.1145\/122058.122069","article-title":"Database Security.","volume":"19","author":"Lunt","year":"1990","journal-title":"ACM SIGMOD Record"},{"key":"10.1016\/S0065-2458(08)60175-8_bib45","doi-asserted-by":"crossref","DOI":"10.1016\/B978-0-7506-1102-2.50011-6","article-title":"Formal Methods: Use and Relevance for the Development of Safety-critical Systems.","author":"McDermid","year":"1993"},{"issue":"1","key":"10.1016\/S0065-2458(08)60175-8_bib46","doi-asserted-by":"crossref","DOI":"10.1080\/09558543.1994.12031224","article-title":"Security for Next Generation of Hypertext Systems.","volume":"6","author":"Merkl","year":"1994","journal-title":"Hypermedia"},{"key":"10.1016\/S0065-2458(08)60175-8_bib47","article-title":"Models of Multilevel Computer Security.","volume":"29","author":"Millen","year":"1989"},{"key":"10.1016\/S0065-2458(08)60175-8_bib48","doi-asserted-by":"crossref","DOI":"10.1109\/RISP.1992.213255","article-title":"Security for Object-Oriented Database Systems.","author":"Millen","year":"1992"},{"key":"10.1016\/S0065-2458(08)60175-8_bib49","doi-asserted-by":"crossref","DOI":"10.1145\/38714.38752","article-title":"Security and Inference in Multilevel Database and Knowledge-based Systems proc.","author":"Morgenstern","year":"1987","journal-title":"ACM SIGMOD Conf. San Francisco, California"},{"key":"10.1016\/S0065-2458(08)60175-8_bib50","article-title":"Conceptual and Logical Design of Relational Databases.","volume":"35","author":"Navathe","year":"1992"},{"key":"10.1016\/S0065-2458(08)60175-8_bib51","article-title":"Rainbow and Arrows: How the Security Criteria Address Computer Misuse.","author":"Neumann","year":"1990"},{"key":"10.1016\/S0065-2458(08)60175-8_bib52","article-title":"Trusted Systems.","author":"Neumann","year":"1992"},{"key":"10.1016\/S0065-2458(08)60175-8_bib53","article-title":"A View Integration Approach for the Design of Multilevel Secure Databases.","author":"Pernul","year":"1991","journal-title":"Proc. 10th In\u0109l Conf. Entity-Relationship Approach (ER '91). San Mateo, California"},{"key":"10.1016\/S0065-2458(08)60175-8_bib54","doi-asserted-by":"crossref","DOI":"10.1109\/CSAC.1991.213008","article-title":"A Multilevel Secure Relational Data Model Based on Views.","author":"Pernul","year":"1991"},{"key":"10.1016\/S0065-2458(08)60175-8_bib55","article-title":"Security Constraint Processing in Multilevel SecureAMAC Schemata.","volume":"648","author":"Pernul","year":"1992"},{"key":"10.1016\/S0065-2458(08)60175-8_bib56","article-title":"Security Constraint Processing During MLS Database Design.","author":"Pernul","year":"1992"},{"issue":"1","key":"10.1016\/S0065-2458(08)60175-8_bib57","doi-asserted-by":"crossref","DOI":"10.1145\/130868.130884","article-title":"A Bibliography on Database Security.","volume":"21","author":"Pernul","year":"1992","journal-title":"ACM SIGMOD Record"},{"key":"10.1016\/S0065-2458(08)60175-8_bib58","doi-asserted-by":"crossref","DOI":"10.1016\/B978-0-08-041893-3.50047-1","article-title":"Security Policies for Databases.","author":"Pernul","year":"1992"},{"key":"10.1016\/S0065-2458(08)60175-8_bib59","article-title":"The Entity-Relationship Model for Multilevel Security.","author":"Pernul","year":"1993"},{"issue":"1","key":"10.1016\/S0065-2458(08)60175-8_bib60","doi-asserted-by":"crossref","DOI":"10.1145\/103140.103144","article-title":"A Model of Authorization for Next-generation Database Systems.","volume":"16","author":"Rabitti","year":"1991","journal-title":"ACM Trans. Database Systems (TODS)"},{"issue":"6","key":"10.1016\/S0065-2458(08)60175-8_bib61","doi-asserted-by":"crossref","DOI":"10.1145\/63526.63528","article-title":"With Microscope and Tweezers: The Worm from MIT's Perspective.","volume":"32","author":"Rochlis","year":"1989","journal-title":"Comm. ACM"},{"key":"10.1016\/S0065-2458(08)60175-8_bib62","article-title":"Designing the Gemsos Security Kernel for Security and Performance.","author":"Schell","year":"1985"},{"key":"10.1016\/S0065-2458(08)60175-8_bib63","series-title":"Proc. 6th IFIP WG 11.3 Conf. Database Security.","article-title":"The SPEAR Data Design Method.","author":"Sell","year":"1992"},{"key":"10.1016\/S0065-2458(08)60175-8_bib64","doi-asserted-by":"crossref","DOI":"10.1109\/ICDE.1990.113484","article-title":"The Semantic Data Model for Security: Representing the Security Semantics of an Application.","author":"Smith","year":"1990"},{"key":"10.1016\/S0065-2458(08)60175-8_bib65","doi-asserted-by":"crossref","DOI":"10.1109\/RISP.1990.63866","article-title":"Modeling Security Relevant Data Semantics.","author":"Smith","year":"1990"},{"key":"10.1016\/S0065-2458(08)60175-8_bib66","article-title":"Entity Modeling in the MLS Relational Model.","author":"Smith","year":"1992","journal-title":"Proc. 18th Conf. Very Large Databases (VLDB '92)."},{"issue":"2","key":"10.1016\/S0065-2458(08)60175-8_bib67","article-title":"Design of LDV: A Multilevel Secure Relational Database Management System.","volume":"2","author":"Stachour","year":"1990","journal-title":"IEEE Trans. KDE"},{"issue":"5","key":"10.1016\/S0065-2458(08)60175-8_bib68","doi-asserted-by":"crossref","DOI":"10.1145\/42411.42412","article-title":"Stalking the Wily Hacker.","volume":"31","author":"Stoll","year":"1988","journal-title":"Comm. ACM"},{"key":"10.1016\/S0065-2458(08)60175-8_bib69","doi-asserted-by":"crossref","DOI":"10.1145\/800191.805536","article-title":"The Ingres Protection System.","author":"Stonebraker","year":"1976","journal-title":"Proc. 1976 ACM Annual Conference."},{"key":"10.1016\/S0065-2458(08)60175-8_bib70","article-title":"Trusted Computer System Evaluation Criteria. (Orange Book).","year":"1985","journal-title":"National Computer Security Center"},{"key":"10.1016\/S0065-2458(08)60175-8_bib71","year":"1990","journal-title":"Trusted Database Interpretation of the Trusted Computer System Evaluation Criteria."},{"issue":"8","key":"10.1016\/S0065-2458(08)60175-8_bib72","doi-asserted-by":"crossref","DOI":"10.1145\/358198.358210","article-title":"Reflections on Trusting Trust.","volume":"27","author":"Thompson","year":"1984","journal-title":"Comm. ACM"},{"key":"10.1016\/S0065-2458(08)60175-8_bib73","doi-asserted-by":"crossref","DOI":"10.1109\/CSAC.1990.143791","article-title":"A Comparison of Type Enforcement and Unix Setuid Implementation of Well-Formed Transactions.","author":"Thomsen","year":"1990"},{"key":"10.1016\/S0065-2458(08)60175-8_bib74","article-title":"Towards the design of a secure data\/knowledge base management system.","volume":"5","author":"Thuraisingham","year":"1990"},{"key":"10.1016\/S0065-2458(08)60175-8_bib75","article-title":"Multilevel Security for Multimedia Database Systems.","author":"Thuraisingham","year":"1991"},{"key":"10.1016\/S0065-2458(08)60175-8_bib76","article-title":"Multilevel Secure Object-Oriented Data Model\u2014Issues on noncomposite objects, composite objects, and versioning.","author":"Thuraisingham","year":"1992"},{"key":"10.1016\/S0065-2458(08)60175-8_bib77","article-title":"A Security Policy for an A1 DBMS (a Trusted Subject).","author":"Wilson","year":"1988"},{"key":"10.1016\/S0065-2458(08)60175-8_bib78","series-title":"Proc. 5th IFIP WG 11.3 Conf. Database Security.","article-title":"Abstract and Concrete Models for Secure Database Applications.","author":"Wiseman","year":"1991"}],"container-title":["Advances in Computers","Advances in Computers Volume 38"],"original-title":[],"deposited":{"date-parts":[[2019,6,7]],"date-time":"2019-06-07T19:50:00Z","timestamp":1559937000000},"score":1,"resource":{"primary":{"URL":"https:\/\/linkinghub.elsevier.com\/retrieve\/pii\/S0065245808601758"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[1994]]},"references-count":78,"URL":"https:\/\/doi.org\/10.1016\/s0065-2458(08)60175-8","relation":{},"ISSN":["0065-2458"],"issn-type":[{"value":"0065-2458","type":"print"}],"subject":[],"published":{"date-parts":[[1994]]}}}