Scribd
Upload
4 views7 pages

Module 5 - DBMS

The document discusses various database security techniques, including authentication, authorization, and encryption. It highlights the importance of preventing unauthorized access and maintaining data integrity through methods like audit trails and access control models. Additionally, it addresses SQL injection as a hacking technique and suggests preventive measures to safeguard against such vulnerabilities.

Uploaded by

damrajanya2
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
4 views7 pages

Module 5 - DBMS

The document discusses various database security techniques, including authentication, authorization, and encryption. It highlights the importance of preventing unauthorized access and maintaining data integrity through methods like audit trails and access control models. Additionally, it addresses SQL injection as a hacking technique and suggests preventive measures to safeguard against such vulnerabilities.

Uploaded by

damrajanya2
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
You are on page 1/ 7

’ i) An altenate ho log

Shadao faging technqe


3i) Naintina two table
1

Quwtent age Fable Shados fage Table


wocd during banoachon backup apg> unchanged
until ccmnit

Advantaqsn
)No leg needed
Asabacko
DCPying ouenhead
)FasteH eCOVe
3) Enawnes atomici lG 3).2i6hieutt with concuviehay
Page 5
(otd)
2
Page 1 3
Page 4
Page 2(otd
Page 3
Cuoent dorechony Page G Shadno inecton
updai Page 2(reu
Pog5(ncw) (not upda ted)

(Pant Module. i)
Module - 55. Database Securil
O Authentcaion -’ Enures that ony valid wes
COUn acees the databaae.
DVerifies the idenilË oh the euser to prevent
unawthouised acr Fo
fo database
Techniques
OTP Bfomebric 7Seot
Pas ued Tofeens
Lqin
împortance d Autheieation
)3nveaned data secwity ii) esion maragemont
ii) Psouenta data leak iv) Psoventa nehvork etta cho
2)Authonizahi om ’ i) Detenineo
Determînes what achono |
oenaiems
penhom în database
ii) Conholed woin9 i 4RANT and REvOKE
n SQL.Commands
Audit Trail ’ A A ecod | log that keeps
hrack who did what rd wshen dhe
databae in the
) Database Encyptiom’ The proce» o) convofrg
dala ito in a databae inlo a coded funbuadabi
fomat to phevert unauthoni2ed aeaes

ranopanent olunn level |Fle evel ypiakon e


Pcce en trot ’ The preLs deidira

Ut eunes that crdu utheized lleA

Acces Conel

futhenicahion Authonizahon Roteo


Specifie sghts
|pivilbgesasign |ike 'SELECT,
b uiers.| NSERT, UPDA
DE LE TE

yreo o Acces Conhot


Aiserionay Aezed landat Acces Roe Baned
mbof (RBAC)
(DAC) (MAc)
’Qune deides’Accen io bascd om
on ’ Acces in
who gets the kired poticies based on olis.
alees to hat
nbollod by the
Conholled by Lala>Cnheleda by systemb ole
poticies
+he wns
lery flexible ’ Vey shnct |Medoratelyy flexibk
Veg
Bared on Secuity ’Bascd n uneH's
fdenily labelo
Aeces shairg allboel -alowed
Aecen shaxing not ependo on the
Aouen Secwnily P Veny high secuxitj’ Modoratr secuunit
->lem men Usage ommon Usage
Personal systems, ilftany, Sefencc, Conporalt envixom
&rmall egtniaiond ovt. Yystms. menlo , Lnivensihe
întrubion eteetion - pooces
&analyzing daBabase acivihes lo dotoet unauthaviycd
acees , attacko Suspicîns behavi onwt .
Types , tnhusion oletoliom Systems
JHost- based | Netwowk-based| ||Siqnalne
based
|Anomaly
boed
Monitos Mcmites nehonk petets
attacksotets unusu a l
achvihes înside tratic to the woing knonm a

DBMS. behavimw
DBMS
pateans |puules.
LAN
Firewall Work
stahons
Intonet
PnbusiotecheTDs|
Eaawkachs
DPaotect Qata the}t Dlan genesali fabse yiivos
a) ight mot ynatch neo
a) letecti internal misuse een attacko
3) Need to be
conßiquved Prpenly
sqL Injedion ’ a) A hacking techrigue where
whene an
attache naento malicious
maiio SQL code into a quey
to access manipulata the data
) Enploils seouily fauws.
woling meharisn -’ 1) an opplicaton. BindLy uey
woet iput in am SQL auey , an attacke 9a
medift
tt he qyuniels qeny's meaning
Dasko done uoing sQL snjechon

View, Edit, 1 op tables rAocess


Authenticahionaelete se ords Sersiiue
in da ta bane databaes

Mettads to prevent sQL Dnjecom

Pgpasd |rput Use oRm Aimit


imi DB
Stdlomenb 'Validation Tools /Pexrmissions
Suppose the code is:

sq 2Edit

SELECT *FROM users WHERE username = + user input +

Ifa user types:


OR '1-'1

the query becomes:


O Copy

SELECT* FROM users WHERE usernane = * OR '1'-'1';

This retums all users even without a valid login!

You might also like