Overview of Database Security

1
Overview of Database Security

• Introduction
• Security Problems
• Security Controls
• Designing Database Security

2
Outline

• Causes of database security problem
• Complexity of the design and implementation of a
  secure database system
• Three main aspects in database security

3
Causes of Database Security Problem

• Widespread use of centralized and distributed
  databases
• Advanced simplification of human and machine
  interface
• Different types of users
• Intrusion, theft and unauthorized disclosure

4
Complexity of Design and Implementation

• Heterogeneity of system users
• Granularity and territorial extension (national
  and international levels) of information systems
• Uncontrollable and unpredictable consequences of
  loss of information
• Difficulties in modeling, specification and
  verification

5
Three Main Aspects

• Secrecy
• Integrity
• Availability

6
Secrecy

• Ensuring secrecy means preventing, detecting,
  deterring the improper disclosure of the database
  information in different environments.
• For examples,
• The target coordinates of a missile should not be
  improperly disclosed.
• The employees should not see the salaries of
  their managers.

7
Integrity

• Ensuring integrity means preventing, detecting
  and deterring the improper modification of a
  database
• For examples,
• The target coordinates of a missile should not be
  improperly modified.
• An employee should be able to modify his or her
  own information.

8
Availability

• Ensuring system availability means preventing,
  detecting and deterring improper denial of
  accesses to services provided by a database
  system.
• For examples,
• The missile should be fired, when the proper
  command is issued.
• Payment orders regarding taxes should be made on
  time by the tax law.

9
Remark

• In many environments, such as public
  institutions, security and integrity are often
  needed in combination.
• For example,
• In hospital, airline companies or credit
  institutions, both secrecy and integrity are
  required.