Database Reference
In-Depth Information
CHAPTER 16
DATABASE SECURITY
CHAPTER OBJECTIVES
•
Establish the goals and objectives of a database security system
•
Examine potential security problems and review solution options
•
Understand the principles and applications of access control
•
Distinguish between authentication and authorization and learn how these are
performed in a database system
•
Study encryption and its application to databases
•
Review special security considerations such as security of statistical databases
and the use of views for database security
Think of a storage place for a manufacturing organization where it keeps all
the important raw materials required for making its products. The organization
uses these materials to run its production. Various types of materials form parts
of different products. Some types of materials are more critical and sensitive to the
production process. The organization cannot perform its day-to-day operations
without access to the materials. Will the organization allow anyone to walk into
the storage facility off the street and have access to the materials? Unless the place
is properly secured, unauthorized persons can enter and steal or destroy the
materials. Not even all authorized persons may be permitted access to all parts
of the storage area. Sensitive and critical materials must be off-limits to most
people.
For a modern organization, its database system is even more significant than
many other types of assets. Many organizations such as financial institutions and
Search WWH ::
Custom Search