The b2/c3 Problem: How Big Buffers Overcome Covert Channel Cynicism in Trusted Database Systems
John McDermott · 1994
We present a mechanism for communication from low to high security classes that allows partial acknowledgments and flow control without introducing covert chan-nels. By restricting our mechanism to the problem of maintaining mutual consis-tency in replicated architecture database systems, we overcome the negative general results in this problem area. A queueing theory model shows that big buffers can be practical mechanisms for real database systems.