Kang, M. H., J. N. Froscher and Ravi Mukkamala, "Architectural Impact on 
Performance of a Multilevel Database System,"  Proc. Tenth Annual Computer 
Security Applications,  Orlando, FL, Dec., 1994.
<a href="1994kang-acsac.ps">
 PostScript</a>

<blockquote>
There are many known approaches for multilevel secure database
systems.  Since protection and assurance are the primary concerns in
MLS databases, performance has often been sacrificed.  Motivated by
performance concerns, a replicated architecture approach which uses a
physically distinct backend database management system for each
security level is being investigated.  This is a report on the behavior
and performance issues for the replicated architecture approach.
Especially, we compare the performance of the Secure
INformation Through Replicated Architecture (SINTRA) MLS database system to
that of a typical conventional (non-secure, single-level) database
system. After observing the performance bottlenecks for the SINTRA, we
present solutions that can alleviate them.
</blockquote>