SDTP: a verified architecture for secure distributed transaction processing

Abstract

SDTP is an architecture for secure distributed transaction processing. It is based upon X/Open's standard architecture for distributed transaction processing. In addition to the ACID (atomicity, consistency, isolation, and durability) properties provided by X/Open's architecture, SDTP guarantees that the Simple Security Property and the -Property of the Bell-LaPadula model are satisfied. We have built a reference implementation of SDTP, formally proven the security properties of the implementation using novel verification techniques, and constructed two prototype applications of the architecture. The first application is a law enforcement tracking system, inspired by the FBI's Field Office Information Management System. The second application is an intrusion detection correlation system.