Database Security Requirements : Computer Systems Controlled Access Requirements Essay

Which of the following displays a list of all system privileges available in Oracle 11g?

Creation of tables will solve the updating, adding and deleting problems. For example if we want to update the phone number of a customer we have to change the number in single row of OWNER table and it will update that change in all tables.

1. Least privilege: SQL accounts will have least privilege. Each SQL account can do a unique task. Some dummy accounts with no privileges will be created. So, if the system is compromised then the database is still protected. Only 2 accounts will have full access (What Is the Principle of Least Privilege (POLP)? A Best Practice for Information Security and Compliance).

If you don’t have the answers to some of the questions pointed above, I believe there is a need to carryout a redesign of the authorizations within your system.

DAC is based on the permissions associated with authentication credentials like a username and password or a smart card system object by way of an access control list.

Each distributed DB perform some procedures to protect the data from any threats may occur through transactions. First is access control methodology which prevent unauthorized access to data. Second, inference control which prohibit users from inferring confidential data of other individuals using queries. Finally, flow control to prevent information from flowing to unauthorized persons in a way that violates organization policies.

Database interface's SQL editor provides an easy and efficient way to write and test scripts and queries. And its powerful data grid provides an easy way to view and edit data related to any DBMS/RDBMS tools.

Discretionary access control means only certain permitted users are allowed access to specific things. However, someone with permitted access can let another user use their access. The least privilege principal is where access is only granted to certain systems and certain data that is needed to do the users job. Sometimes temporary access is given to data that is required to access random jobs or to see what that user is doing. When this happens, the access is only temporary, it is imperative to uphold the principal of least privilege to ensure that user does not have access to the data when the job finished.

C1 - Discretionary Security Protection: In this sub division Access Control Lists (ACLs) security which protect User/Group/World. Security will protect following Users who are all on the same security level, Username and Password protection and secure authorisations database (ADB), Protected operating system and system operations mode, Periodic integrity checking of TCB, Tested security mechanisms with no obvious bypasses, Documentation for User Security, Documentation for Systems Administration Security, Documentation for Security Testing, TCB design documentation and Typically for users on the same security level.

C. Permissions and Rights (What they can do. . Which operations they can perform on a system.)

An access list is a list for each object consisting of the domains with a nonempty set of access rights for that objects.

The organization has a security objective of protecting the database from being altered. Since the data is held in the system, there are regulations that have been set to the users, and there are also limits to the functions that each user performs. In this case, there are three categories of users each with clearly defined responsibilities. For instance, the administration team has been given full control of the application in that they can even alter codes and perform any variations to the database objects. The other groups of users are the executives; these have the ability to access all the information

- DBA security – Controlling the access on the DB level can also serve as a mechanism to protect sensitive data. In this type, there is always an administrator who controls the process of Account creation, granting access, revoking roles and assigning appropriate security level assignment.

Least privilege- Providing the minimum amount of privilege necessary to perform a job or function. An example will be a first level helpdesk technical does not need access to network switches and routers configuration to do his/her job.

Oracle designs, develops, and supports computer-software products. This software is used for database management and network products, application development productivity tools, and end user applications. The company’s principal product, the oracle relational database-management system, runs on supercomputers, mainframes, microcomputers, and personal computers. The company also offers consulting, support, and system integration services for its customers. Oracle Corporation provides the software that powers the Internet.