Annotated Bibliography On Database Security

When an employee is granted database privileges that surpass the requirements of their position, these excessive privileges could be abused. In example, a bank employee whose job requires the ability to change only basic account holder contact info could take advantage of excessive database privileges and add funds to their account balances or of a colleague’s savings account. Further, when someone changes position within a business or leaves it, usually his or her access rights to sensitive data do not change. In the latter case, if these employees depart on bad terms, they can use their old access privileges to commandeer high value data or inflict damage in a revenge attack. This tends to happen because privilege control mechanisms for job roles were not well defined or maintained. Therefore, employees may be granted generic or default access privileges that surpass their actual job requirements, or even when they just accumulate such privileges over time changing positions within the business.

In today’s IT world every organization has a responsibility to protect the information and sensitive data they have. Protecting data is not only responsibility of security and IT staff but every individual is involved in protecting the information. The risks to information security are not digital only, but it involves technology, people and process that an organization may have. These threats may represent the problems that are associated to complex and expensive solution, but doing nothing about these risks is not the solution.

Security is very critical section in Distribution DBMS concerning credit card data and customer’s data.

Due to the internet and E-commerce, data security is even more important due to the possibility of hackers, viruses, and malware.

“The practice of keeping data protected from corruption and unauthorized access” is known as data security (SpamLaw, 2011). The focal point of data security is the protection of

What is a database? According to our book, it’s an organized collection of logically related data. The information collected in a database can be effortlessly administered and accessed. However, with each database there is a concern of security. According to our book, the goal of database security is to protect and prevent data from unintentional or deliberate threats to its integrity and accessibility. The database environment has grown more complex, with distributed databases located on client/server architectures and personal computers as well as mainframes. Access to data has become more open through the Internet and corporate intranets and from mobile computing devices. As a result, managing data security has become more difficult and time-consuming.

Our data is never at rest. Even when organizations depend on their database for storage, there is always copies of data somewhere else to be found. To service our men and women in the Army Reserves, data has to be manipulated at the local computer and then sent back to be stored back on the database. The very moment that data is moved and stored on a local machine for it to be manipulated is also the moment that the data is most vulnerable. Despite the concerted efforts to ensure data confidentiality the overall security depends efforts put forth by the weakest link. The insider threat is one of the hardest risk to mitigate, mainly due to their initial need to legitimately data access.

Database Encryption is one of the technique used for securing the data in database. This method transforms information on a computer in such a way that it becomes unreadable. So, even if someone is able to gain access to a computer with personal data on it, they likely won’t be able to do anything with the data unless they have original data key, complicated or expensive software. The main function of encryption is essentially to translate normal text into cipher text. Encryption makes sure that data doesn’t get read by the wrong people, but can also ensure that data isn’t altered in transit, and verify the identity of the sender. Data Encryption method typically uses a specified parameter or key to perform the data transformation. Some encryption algorithms require the key to be the same length as the message to be encoded, yet other encryption algorithms can operate on much smaller keys relative to the message. Encryption is most used among transactions over insecure channels of communication, such as the internet. Encryption is also used to protect data being transferred between devices such as mobile telephones, automatic teller machines (ATMs), and many more. Encryption can be used to create digital signatures, which allow a message to be authenticated. When properly implemented, a digital signature gives the recipient of a message reason to believe the message was sent by the claimed sender.

Information security incidents include accidental or deliberate infringements of systems or data confidentiality or privacy, interruptions to systems or process availability, and damage to system or data integrity.

Database security mainly concerns with protecting data and the applications of the databases that are stored. In the realms of Information security and computer security, the database security is the special topic. Database administrators may also be responsible for misconfiguration of controls within the software where database is stored. Database monitoring is also an important security layer. Electronic signatures and encryption and many other new technique are introduced to protect databases. Over the years, the database security has developed a very large number of different techniques to assure integrity, availability, and data confidentiality. However, there are also threats, which are related to these databases. The threats take advantage of the loop wholes in these databases. As discussed earlier in the outline about how this security issue has brought huge problems in the company. Databases are the integral part of the company because it contains a lot of sensitive information about the company and even the information of their clients is stored in these databases. Therefore, their security is of high importance and each company in the market should consider it, as the world is becoming a data oriented.1

DELETE – This privilege gives the user the ability to delete rows/records from specified database tables (Harter, 2008, p.2).

With advances in technology constantly happening, it can be hard to keep up with all of the latest trends. If organizations cannot keep up with the latest trends, it can lead to flaws in their security. Any flaws in security can have a detrimental effect on an organization’s database. Almost every organization has some sort of database, whether it is for maintaining customers, inventory, or vital information.

Nowadays, entire population integrates information security within their lives. It is simply known that every single person, organisation, governments, military services, corporations, financial institutions, hospitals in the world are dependent on information security systems. Each requires their data to be as secure as it is possible and expect great deal of confidential information about employees, customers, products, research, and financial status.

Databases are a core component of many web applications. The number of web applications that use databases continues to increase each year, and the rate at which malicious users are hacking into databases is growing at an alarming rate. The hacker’s intent is to destroy data or steal sensitive information such as credit card numbers, social security numbers, and passwords. This produces a strong need to ensure the integrity of the data and secure the data from unintended access. As a web developer, there are many techniques that can be used to program security into a web application to lessen the likelihood of a malicious user being able to access confidential information. It is

For many computing systems, database technologies are an essential component. They permit data to be reserved and shared electronically and the quantity of data retained in these systems continually develops at an exponential rate. As organizations upsurge their dependence on, possibly distributed, systems of information for daily business, they develop the vulnerability to security breaches even as they get efficiency and productivity advantages. However, numerous techniques like encryption and electronic signatures, are presently available for data protection whenever transmitted across the sites, an actually comprehensive tactic to protect data must also contain mechanisms to enforce access control policies centered on data contents, characteristics and subject qualifications, and other relevant appropriate information, like time. It is currently well recognized that the semantics of data has to be taken into consideration so as to stipulate effective policies of access control. Moreover, data integrity and availability techniques must be adopted that specially tailored to database systems. In this regard, for many years, the community for database security has developed various different techniques and approaches which assure data privacy, integrity, and availability. However, in spite of such advancements, the database security zone faces numerous inventive challenges. The security concern evolution, the "disintermediation" of data access, novel computing