Analysis of Database Management and Information Retrieval Systems

Another example of a access control model that can be applied in this situation is known as the Clark and Wilson Integrity Model. This model provides improvements from the Biba Integrity Model of access control. Developed by David Clark and David Wilson, the mode concentrates on what happens when a user tries to do things they are not permitted to do, which was one flaw of the Biba Integrity Model . The other flaw that was addressed was the model also reviews internal integrity threats . There are 3 key elements of the Clark and Wilson integrity model; the first it stops unauthorized users from making changes within the system. The second, it stops authorized users from making improper changes, and the third, it maintains consistency both internally and externally . Within the Clark and Wilson model a user’s access is controlled by

1. Least privilege: SQL accounts will have least privilege. Each SQL account can do a unique task. Some dummy accounts with no privileges will be created. So, if the system is compromised then the database is still protected. Only 2 accounts will have full access (What Is the Principle of Least Privilege (POLP)? A Best Practice for Information Security and Compliance).

Constraints are used to ensure the accuracy and integrity of the data contained in the database.

Why is it so important to have security for an organizations database? One reason will be to secure the organizations personal and confidentiality data information. Oracle has a database security software that enables a regulatory compliance for both oracle and non-oracle databases. Oracle has a powerful and a preventative detective security controls that will include database

Security is very critical section in Distribution DBMS concerning credit card data and customer’s data.

Access controls will be developed to ensure that only the appropriate users are accessing their respective documents and that sensitive information is not

“The practice of keeping data protected from corruption and unauthorized access” is known as data security (SpamLaw, 2011). The focal point of data security is the protection of

The organization has a security objective of protecting the database from being altered. Since the data is held in the system, there are regulations that have been set to the users, and there are also limits to the functions that each user performs. In this case, there are three categories of users each with clearly defined responsibilities. For instance, the administration team has been given full control of the application in that they can even alter codes and perform any variations to the database objects. The other groups of users are the executives; these have the ability to access all the information

1. Give limited people to access the data. (set up authorizations.) Make sure only people who needs what information and who have rights to edit what information.

The purpose of access control, and the rights and privileges is to give users and objects associated data and records in the database. Objects are tables, views, rows and columns. The goal of this design is to manage and secure database and assigning such as user name and password. Management procedures include reading, insert, update and delete or execute stored procedures. In fact, some models such as access control in mandatory access control (MAC), Discretionary Access Control (DAC) and the role of building access control (RBAC). Each one of them has some qualities. And mandatory access control (MAC) means decisions are made by the central authority, but they cannot change the access for individual owner of the object and the owner's rights.

- DBA security – Controlling the access on the DB level can also serve as a mechanism to protect sensitive data. In this type, there is always an administrator who controls the process of Account creation, granting access, revoking roles and assigning appropriate security level assignment.

Databases are normally used by businesses and schools to store their data. These databases are kept secure, and users can only access the information stored on the database they have been granted access to. Now data is added to, accessed, or remove from a database using languages such as SQL (Structured Query Language), MYSQL (My Sequel), etc.

Information security refers to protection of information against unauthorised access whether in storage, being processed or in transit. The major goals of information security are confidentiality, integrity and availability. In order to meet these security goals, several access control models have been proposed. Access Control is the control of access to data, system and dialogues based on certain policies. Access control models were traditionally classified as Discretionary Access Control and Mandatory Access Control. However several newer models have since arrived such as I-BAC (Identity Based Access Control), RBAC (Role Based Access Control Model), ABAC (Attribute Based Access Control), TBAC (Task Based Access Control) and T-MAC (Team Based Access Control) (Joshi, Aref, Ghafoor & Spafford, 2001).

Databases allow us to easily store and retrieve data in a purely digital format. The strength of this is that large amounts of data can be stored and retrieved with minimal effort on the part of the user. Opposed to manually flipping through files, one can quickly pull up the requested data through a computer program. Many systems that were conventionally paper and file based have been converted to a digital format which are now stored in one or more databases.

As the use of computers, databases, and technology in general, security has grown to be a powerful tool that has to be used. The threat of outside sources intruding and exploiting crucial information is a threat that is present on a daily basis. As a part of creating and implementing a security policy, a user must consider access control. Access Control is a security tool that is used to control who can use or gain access to the protected technology. Access control security includes two levels; logical and physical. Though database intrusions can happen at any moment, access control provides another security barrier that is needed.