Introduction to Database Security

Database security aims to safeguard the confidentiality, integrity, and availability of stored data.

Loss of integrity occurs when data is improperly modified, potentially through unauthorized updates, insertions, or creation of records.

Loss of availability happens when authorized users are unable to access the data they need, due to system failures or malicious attacks.

Loss of confidentiality occurs when unauthorized users gain access to sensitive information, leading to breaches of privacy or data leaks.

Database security is not solely the responsibility of the database management system (DBMS). It requires a collaborative effort involving applications, web servers, firewalls, and security monitoring systems.

Access control is the first line of defense, using user accounts and passwords to restrict access to the database.

Inference control aims to prevent users from deducing sensitive information from queries that involve only summary statistics.

Flow control restricts the movement of data to prevent unauthorized users from accessing it.

A security method that uses encryption to protect sensitive data, like credit card numbers, during transmission over networks. Think of it like a secret code for information traveling online.

A method of database security for controlling access based on user permissions. Basically, giving specific users the right to view, edit, or delete certain data.

A security method that classifies both data and users into different security levels. This ensures users can only access data at their own level or below.

The central authority managing a database system. They have powerful privileges, kind of like a database king.

A specialized account for the DBA, providing access to powerful commands and tools. It's like a VIP pass for the database.

Commands used by the DBA for granting and revoking access privileges to users and groups. Think of it like configuring access to a building.

The most common way to enforce discretionary access control in a database. It's about deciding who gets access to what.

A primary method used for enforcing discretionary access control in a database. It involves assigning and removing access permissions to users and groups.

The ability to allow other accounts to access a particular privilege.

The process by which a DBMS tracks who has granted which privileges to other accounts.

A SQL command used to grant specific privileges on database objects to a user or group of users. It dictates which operations a user can perform, preventing unauthorized access.

A privilege that allows the grantee to create new tables (base relations) within a database.

The owner of a relation automatically possess the power to grant privileges on that relation to other users.

Assigning privileges to specific database accounts, independently of the database relations. Examples include CREATE, DROP, ALTER, MODIFY, and SELECT privileges.

Controlling access to individual relations (tables) or views within the database. The DBA can determine who can read, update, or reference each specific table.

The account that owns a specific relation, automatically granted all privileges to the relation.

The ability for a relation owner to grant or deny privileges to other users on their owned relations.

Creating a limited view of a relation to allow other users to only access specific fields or tuples.

Revoking a privilege temporarily.

Granting a privilege to another user with the ability to further grant that privilege to others.

The ability for a relation owner to restrict the privileges previously granted to other users.