SlideServe
Télécharger Obtenir Pro
Menu
Accueil Pro
Préférences
ApparenceLight Aide et commentaires
© SlideServe · v2026

Chapter 6 – Database Security

donnasimpkins avatar
donnasimpkins
15 diapositives · 223 Views · Jan 06, 2020

Chapter 6 – Database Security. Integrity for databases: record integrity, data correctness, update integrity Security for databases: access control, inference, and aggregation Multilevel secure databases: partitioned, cryptographically sealed, filtered. Introduction to Databases.

Chapter 6 – Database Security - slide 1
01 / 15Chapter 6 – Database Security
1 / 17

Télécharger la présentation

Chapter 6 – Database Security
Une image / un lien ci-dessous est fourni (tel quel) pour télécharger la présentation

Politique de téléchargement : le contenu du site vous est fourni TEL QUEL pour votre information et votre usage personnel ; il ne peut être vendu, concédé sous licence ni partagé sur d’autres sites sans l’accord de son auteur.Le contenu vous est fourni TEL QUEL, pour votre information et votre usage personnel uniquement. Téléchargez la présentation en cliquant sur ce lien. Lors du téléchargement, si vous ne parvenez pas à télécharger une présentation, l’éditeur a peut-être supprimé le fichier de son serveur.Pendant le téléchargement, si vous ne parvenez pas à obtenir une présentation, le fichier a peut-être été supprimé par l’éditeur.

F I N

Plus de contenu associé

Transcription de la présentation

  1. Chapter 6 – Database Security • Integrity for databases: record integrity, data correctness, update integrity • Security for databases: access control, inference, and aggregation • Multilevel secure databases: partitioned, cryptographically sealed, filtered

  2. Introduction to Databases • Database – collection of data and set of rules that organize the data by specifying certain relationships among the data • Database administrator (DBA) • Database management system (DBMS) – database manager, front-end

  3. Introduction to Databases • Records – contain related group of data • Fields (elements) – elementary data items • Schema – logical structure of database • Subschema – view into database

  4. Introduction to Databases • Relational • Rows (relation); columns (attributes) • DB2, Oracle, Access • Hierarchical • IMS • Object-oriented

  5. Introduction to Databases • Queries • SELECT NAME = ‘ADAMS’ • SELECT (ZIP = ‘43210’) ^ (NAME = ‘ADAMS’) • Project • SHOW FIRST WHERE (ZIP = ‘43210’) ^ (NAME = ‘ADAMS’) • Join • SHOW NAME, AIRPORT WHERE NAME.ZIP = AIRPORT.ZIP

  6. Advantages of Using Databases • Shared access • Minimal redundancy • Data consistency • Data integrity • Controlled access

  7. Security Requirements • Physical database integrity • Logical database integrity • Element integrity • Auditability • Access control • User authentication • Availability

  8. Integrity of the Database • Users must be able to trust the accuracy of the data values • Updates are performed by authorized individuals • Integrity is the responsibility of the DBMS, the OS, and the computing system manager • Must be able to reconstruct the database at the point of a failure

  9. Element Integrity • Correctness or accuracy of elements • Field checks • Access control • Maintain a change log – list every change made to the database

  10. Auditability & Access Control • Desirable to generate an audit record of all access to the database (reads/writes) • Pass-through problem – accessing a record or element without transferring the data received to the user (no reads/writes) • Databases separated logically by user access privileges

  11. Other Security Requirements • User Authentication • Integrity • Confidentiality • Availability

  12. Reliability and Integrity • Database integrity • Element integrity • Element accuracy • Some protection from OS • File access • Data integrity checks

  13. Two-Phase Update • Failure of computing system in middle of modifying data • Intent Phase – gather resources needed for update; write commit flag to the database • Update Phase – make permanent changes

  14. Redundancy / Internal Consistency • Error detection / Correction codes (parity bits, Hamming codes, CRCs) • Shadow fields • Log of user accesses and changes

  15. Concurrency/Consistency • Access by two users sharing the same database must be constrained (lock) • Monitors –check entered values to ensure consistency with rest of DB • Range Comparisons • State Constraints – describes condition of database (unique employee #) • Transition Constraints – conditions before changes are applied to DB