3. DBSec 1989: Monterey, California, USA

Case Study: Medical Information Systems

• T. C. Ting: Application Information Security Semantics: A Case of Mental Health Delivery. 1-12
• Joachim Biskup: Protection of Privacy and Confidentiality in Medical Information Systems: Problems and Guidelines. 13-23

Policy and Models

• John E. Dobson: Conversation Structures as a Means of Specifying Security Policy. 25-39
• John A. McDermid, Ernest S. Hocking: Security Policies for Integrated Project Support Environments. 41-74
• Tsau Young Lin, Larry Kerschberg, Robert P. Trueblood: Security Algebras and Formal Models: Using Petri Net Theory. 75-96

Requirements and Methods

• Thomas H. Hinke: DBMS Trusted Computing Base Taxonomy. 97-108
• Richard D. Graubart: Comparing DBMS and Operating System Security Requirements - The Need for a Separate DBMS Security Criteria. 109-114
• Gary W. Smith: Solving Multilevel Database Security Problems: Technology Is Not Enough. 115-125
• Catherine Meadows: Constructing Containers Using a Multilevel Relational Data Model. 127-141

Integration of Security Considerations with DBMS Development

• Ravi S. Sandhu: Mandatory Controls for Database Integrity. 143-150
• Cristi Garvey, Thomas H. Hinke, Nancy R. Jensen, Jane Solomon, Amy Wu: A Layered TCB Implementation versus the Hinke-Schaefer Approach. 151-165
• Richard D. Graubart: A Comparison of Three Secure DBMS Architectures. 167-190
• John R. Campbell: An Interim Report on the Development of Secure Database Prototypes at the National Computer Security Center. 191-197

Security Problems for Extended Database Technologies

• Teresa F. Lunt: Multilevel Security for Object-Oriented Database Systems. 199-209
• Thomas F. Keefe, Wei-Tek Tsai: Prototyping the SODA Model. 211-235
• David A. Bonyun: Using Exess as a Framework for Secure DBMSs. 237-255
• María M. Larrondo-Petrie, Ehud Gudes, Haiyan Song, Eduardo B. Fernández: Security Policies in Object-Oriented Databases. 257-268

Audit

• Sushil Jajodia, Shashi K. Gadia, Gautam Bhargava, Edgar H. Sibley: Audit Trail Organization in Relational Databases. 269-281
• Hilary H. Hosmer: Handling Security Violations within an Integrity Lock DBMS. 283-292

Inference and Aggregation

• Tzong-An Su, Gultekin Özsoyoglu: Multivalued Dependency Inferences in Multilevel Relational Database Systems. 293-300
• Simon R. Wiseman: On the Problem of Security in Data Bases. 301-310
• Leoan J. Buczkowski: Database Inference Controller. 311-322
• J. Thomas Haigh, Richard C. O'Brien, P. D. Stachour, Dana L. Toups: The LDV Approach to Database Security. 323-339

Assurance

• Richard A. Kemmerer: Formal Specification of a Mental Health Delivery System. 341-351

Discussion Summary / Report

• Ravi S. Sandhu: Discussion Summary. 353-365
• Marvin Schaefer, Brian Hubbard: Report From IFIP Working Group 11.3, Database Management Security, Task Force on Technical Issues Relating to the TDI. 367-376
• Carl E. Landwehr: Research Question List, Answers, and Revision. 377-394