Curriculum Vitae - The University of Texas at Dallas

1980s and early 1990s by Oracle, Sybase, Informix and Ingres. This was a team effort with colleagues atHoneywell.Secure Query Processing: Paper #2 (IEEE Computer) describes secure query processing strategies.Essentially, I enhanced the query strategies developed by Lock Data Views and introduced ideas from thefield of logic and databases. I developed query strategies based on the re-writing principles. Various typesof policies were considered in the design. This paper was first submitted to the Hawaii InternationalConference on Systems Sciences in 1988 and won the best paper award. I was then invited to submit thejournal version of the paper to IEEE Computer which has the largest audience in computer science. Then,together with my colleague at the University of Minnesota and a student, this paper was enhanced andpublished in IEEE Computer.Secure Distributed Data Management: The third and fourth papers describe aspects of securedistributed database systems. In Paper #3 (Computers and Security Journal) I was the first to exploremultilevel security for distributed database systems. I designed a multilevel data model, query processingstrategies and transaction management strategies. This paper resulted in several research directionsincluding the algorithms I designed for both query and transaction management. One such algorithm andimplementation carried out together with a colleague at MITRE, is reported in Paper #4 (Journal ofSystems and Software). In particular, we developed a system that enforced multilevel security for queryprocessing in a distributed environment. We demonstrated the system by connecting secure datamanagement systems in Bedford, MA, McLean, VA and Fort Monmouth, NJ in 1991. Such an integrationwas novel at that time and the research was transferred to Army’s maneuver control systems.Secure Object Data Management: The next two papers (Paper #5 and #6) describe my work inmultilevel secure object database systems. Paper #5 (ACM OOPSLA) describes a widely cited securemodel for object database systems. This paper describes several security properties for the object model.Then these policies were incorporated into the design of the system and published in Paper #6 (Journal ofObject-Oriented Programming). Subsequently together with a colleague at MITRE, we developed proof ofconcept demonstrations of the design using the Object Store data management system in 1992. Thisresearch had an impact on several secure object data management systems’ research and developmentefforts by others. In addition, we also transferred the research to a system developed by OntosCorporation.Foundations of the Inference Problem: The next four papers describe my work on the Inferenceproblem. I have been commended for this work from researchers as well as government sponsors. In Paper#7 (Computer Security Foundations Workshop), I was the first to prove that the inference problem wasunsolvable and presented it at the 3 rd IEEE Computer Security Foundations Workshop. The paper did notappear in the proceedings as the paper was not publicly released in time for the workshop. This researchwas also quoted by Dr. John Campbell of the National Security Agency as the most significant research insecure data management system in 1990. His quote appeared in the Proceedings of the 1990 NationalComputer Security Conference.Inference Controllers: Once I proved that the inference problem was unsolvable, then I designed adatabase inference controller that handled policies during query, update and databases operations.Together with colleagues at MITRE, my design was implemented and published in Paper #8 (Data andKnowledge Engineering Journal). This was the first inference controller to be developed and a patent wasobtained. Our integrated inference controller processed some policies during database query, somepolicies during database updates and some policies during database design and this concept was novel atthat time. Then in Paper #9 (IEEE Transactions on Knowledge and Data Engineering), I designedalgorithms for extending the inference controller design to a distributed environment and that resulted inthe first distributed inference controller. Together with a colleague, this design was implemented. In thissystem users could pose queries from multiple sites, but the system would examine the policies across allthe sites and only give out information that the user was authorized to know. The inference controllerswere distributed and communicated with each other to process queries and updates.Designing Secure Applications: In Paper #10 (IFIP Data Security Conference), I looked at the inferencefrom a different angle. Here I tried to handle the problem when the application was designed. I used102