An XML-Based Security Management Model for Multilevel Security Databases

Awad Awadelkarim and Norbik Idris

Faculty of Computer Science and Information System, University Technology Malaysia, Malaysia

Abstract: This paper proposes a universal architecture of Security Management Model (SMM) for integrating security features namely low-level access control at row and column level of relational legacy databases using XML as an integration medium. The proposed model integrates and then rearranges, controls, and manages the new and inherent low-level access control attributes based on Rule-Based Algorithm (RBA) and Global Security Policies (GSP) of the integrated environment. In addition, the paper shows how Public-Key Cryptography Scheme (PKCS) can be adapted by the SMM to provide a consistent security management at the global level.

Keywords: Database security, integration of databases, legacy databases, access control, PKCS, XML.