Introduction to Database Security

Podcast

Play an AI-generated podcast conversation about this lesson

Questions and Answers

Database security is a narrow area of focus, mainly concerned with system-level security.

False (B)

Which of the following is NOT a threat to databases?

Loss of cost-effectiveness (correct)

Loss of integrity

Loss of availability

Loss of confidentiality

Unauthorized access to confidential information can lead to a violation of the ______ Act.

Data Privacy

Give an example of how improper modification of information can lead to a loss of integrity in a database.

A deliberate or accidental change to a database record, such as changing a customer's credit limit without authorization, could compromise the accuracy and trustworthiness of the data. Signup and view all the answers

Match the following database security control measures with their primary focus:

Access control = Restricting user access to specific data based on permissions and credentials Inference control = Preventing unauthorized users from deducing sensitive information from aggregated data Flow control = Controlling the movement of information within a system to prevent unauthorized access Signup and view all the answers

Besides the DBMS, which other elements contribute to the security of a database system?

All of the above (D) Signup and view all the answers

Explain how "loss of availability" affects users in a database system.

Loss of availability prevents legitimate users from accessing the data they need, potentially disrupting business operations, research, or data-driven decision-making. Signup and view all the answers

DBMS alone is responsible for ensuring the complete security of a database.

False (B) Signup and view all the answers

Which of the following is NOT a typical mode of access granted to users in discretionary security mechanisms?

Execute (A) Signup and view all the answers

Mandatory security mechanisms classify both users and data into security classes.

True (A) Signup and view all the answers

What is the primary role of a Database Administrator (DBA) in a database system?

A Database Administrator (DBA) manages and controls the overall access and security of the database system. Signup and view all the answers

Data encryption is primarily used to protect sensitive data, such as ______, that is transmitted over communication networks.

credit card numbers Signup and view all the answers

Match the following database security mechanisms with their descriptions:

Discretionary security mechanisms = Grant access privileges to users for specific data, records, or fields Mandatory security mechanisms = Enforce multilevel security by classifying users and data based on security clearance levels DBA = Central administrator responsible for managing database security Signup and view all the answers

Which of the following is NOT a typical DBA-privileged command?

Data Backup and Recovery (D) Signup and view all the answers

A 'superuser' or 'system' account usually grants the user full control over the database system.

True (A) Signup and view all the answers

Give an example of a typical security policy enforced by mandatory security mechanisms.

A typical security policy could state that users with a 'Secret' clearance level can only access data classified as 'Secret' or 'Unclassified'. Signup and view all the answers

What does the GRANT OPTION allow a user to do?

Grant privileges to other accounts (C) Signup and view all the answers

A1 can propagate the privileges it has been granted to A2, if it grants them with GRANT OPTION.

True (A) Signup and view all the answers

Which SQL command does A1 use to grant privilege to A2 for inserting and deleting tuples on EMPLOYEE and DEPARTMENT?

GRANT INSERT, DELETE ON EMPLOYEE, DEPARTMENT TO A2; Signup and view all the answers

If A1 is the owner of EMPLOYEE and DEPARTMENT, it automatically has the __________.

GRANT OPTION Signup and view all the answers

Match the following accounts with their capabilities:

A1 = Create base relations A2 = Insert and delete tuples in EMPLOYEE and DEPARTMENT A3 = Does not have granted privileges A4 = Not mentioned in context Signup and view all the answers

What type of privileges can be assigned at the account level in a database system?

CREATE, DROP, ALTER, MODIFY, SELECT (D) Signup and view all the answers

The owner of a relation can grant privileges to users on other relations they do not own.

False (B) Signup and view all the answers

What SQL command is used to revoke a privilege?

REVOKE Signup and view all the answers

The DBA can control access to each individual relation or view in the database at the __________ level.

relation Signup and view all the answers

Which privilege allows a user to retrieve data from a relation?

SELECT (D) Signup and view all the answers

Match the following privileges with their descriptions:

SELECT = Retrieve or read data MODIFICATION = Change or update data REFERENCES = Use a relation in foreign key constraints GRANT OPTION = Allow another user to grant privileges Signup and view all the answers

A view can be created to restrict access to only certain fields of a relation.

True (A) Signup and view all the answers

What is the purpose of the GRANT OPTION when granting privileges?

To allow the recipient to grant that privilege to others. Signup and view all the answers

Study Notes

Database Security

Database security is a broad subject encompassing legal, ethical, and systemic issues, including personal data access, policy concerns, and DBMS-level security.
Security threats to databases can result in data integrity loss, improper data modifications, unavailability issues (legitimate users unable to access data), and confidentiality breaches (unauthorized data disclosure). Examples of breaches include data privacy act violations.