INTRODUCTION TO DATABASE SECURITY PPT

INTRODUCTION TO DATABASE SECURITY PPT


Instructor : Dr. S. Srinivasan

COURSE                   : 1. Learn the fundamental concepts in database security.

OBJECTIVES            2. Understand how access controls work in a database.

                                      3. Learn how to develop and manage secure database architectuers.

                                      4. Be familiar with the laws governing computer privacy.

                                      5. Understand the alternatives to encrypting stored data for security.

                                      6. Understand how commercial systems such as SQL Server 2000 and

                                          Oracle enforce security and their vulnerabilities.

                                      7. Learn the security audit methods involving databases.

COURSE                   : Basic data protection methods such as discretionary and mandatory access

DESCRIPTION          controls, secure database design, data integrity, secure architectures, secure

                                      transaction processing, information flow controls, and auditing, Copyright

                                      and database protection, privacy issues (including employee records and

                                      HIPAA).  Security models for relational and object-oriented databases,

                                      Security of databases in a distributed environment, survey of commercial

                                      systems, and research prototypes.

TEXT                                    : 1. SQL Server Security Fundamentals by C. Andrews, D. Litchfield, and

      B. Grindlay, McGraw-Hill/Osborne, 2003, ISBN: 0-07-222515-7.

  2. Collection of papers made available through the CopyIT Center.

REFERENCES:       1. Database Security by Silvano Castano, Maria Fugini, Giancarlo Martella,

                                        and Pierangela Samarati, ACM Press Books (Diane Publishing Co.),

    1995, ISBN: 0788165429 (translated from Italian)

                                    2. Oracle Security by Marlene Theriault and William Heney, O’Reilly

                                        Publishers, 1998, ISBN: 1-56592-450-9

                                    3. Modern Cryptography by Wenbo Mao, Prentice-Hall, NJ, 2004,

     ISBN: 0-13-066943-1.

4. Database Systems: Design, Implementation & Management, 6^thedition by

    Peter Rob and Carlos Coronel, Course Technology, 2004,

    ISBN: 0-619-16033-0

LECTURE NOTES (PowerPoint)

Lecture 1 :	Database Security
Lecture 2 :	Access Control
Lecture 3 :	Authentication
Lecture 4 :	Vulnerabilities
Lecture 5 :	Multilevel Security
Lecture 6 :	Polyinstantiation
Lecture 7 :	Security Architecture
Lecture 8 :	SQL Server Security
Lecture 9 :	Security Plan
Lecture 10:	Secure Storage
Lecture 11:	DB-inferences
Lecture 12:	Privacy-Protection
Lecture 13:	Security Audit