Re-thinking Kernelized MLS Database Architectures in the Context of Cloud-Scale Data Stores

摘要: We re-evaluate the kernelized, multilevel secure (MLS) relational database design in context of cloud-scale distributed data stores. The transactional properties and global integrity for schema-less, stores are significantly relaxed comparison to databases. This is a new interesting setting mandatory access control policies, has been unexplored prior research. describe implementation prototype MLS column-store following kernelized pattern. Our first store using an architectural approach highassurance; it enforces lattice-based information flow policy, without any additional trusted components.We highlight several promising avenues practical systems research secure, architectures implementing policies Java-based untrusted subjects.