Computational issues in secure interoperation
- 1 January 1996
- journal article
- Published by Institute of Electrical and Electronics Engineers (IEEE) in IEEE Transactions on Software Engineering
- Vol. 22 (1) , 43-52
- https://doi.org/10.1109/32.481533
Abstract
Advances in distributed systems and networking technology have made interoperation not only feasible but also increasingly popular. We define the interoperation of secure systems and its security, and prove complexity and composability results on obtaining optimal and secure interoperation. Most problems are NP-complete even for systems with very simple access control structures, while for a general setting the problem is undecidable. Nevertheless, composability reduces complexity in that secure global interoperation can be obtained incrementally by composing secure local interoperation. We illustrate, through an application in secure database interoperation, how these theoretical results can help system designers in practice.Keywords
This publication has 11 references indexed in Scilit:
- The Chinese Wall security policyPublished by Institute of Electrical and Electronics Engineers (IEEE) ,2003
- The typed access matrix modelPublished by Institute of Electrical and Electronics Engineers (IEEE) ,2003
- Towards security in an open systems federationPublished by Springer Nature ,1992
- Proof verification and hardness of approximation problemsPublished by Institute of Electrical and Electronics Engineers (IEEE) ,1992
- Federated database systems for managing distributed, heterogeneous, and autonomous databasesACM Computing Surveys, 1990
- Integrating security in a large distributed systemACM Transactions on Computer Systems, 1989
- Security Policies and Security ModelsPublished by Institute of Electrical and Electronics Engineers (IEEE) ,1982
- Formal Models for Computer SecurityACM Computing Surveys, 1981
- Protection in operating systemsCommunications of the ACM, 1976
- Secure Computer System: Unified Exposition and Multics InterpretationPublished by Defense Technical Information Center (DTIC) ,1976