The design of secure buffer managers for database systems supporting real-time applications with firm deadlines is studied here. We first identify the design challenges and then present SABRE, a new buffer manager that aims to address these challenges. SABRE guarantees covert channel-free security, employs a fully dynamic one-copy allocation policy for efficient usage of buffer resources, and incorporates several optimizations for reducing the number of killed transactions and for decreasing the unfairness in the distribution of killed transactions across security levels. Using a detailed simulation model, the real-time performance of SABRE is evaluated against unsecure conventional and real-time buffer management policies. Our experiments show that SABRE provides security with only a modest drop in real-time performance. Finally, we present FSABRE, an adaptive admission controlaugmented version of SABRE, which efficiently ensures close to ideal fairness across transaction security le...
Binto George, Jayant R. Haritsa