security of database
30019588
Transparent Data Encryption Solution for Security of Database Contents
The present study deals with Transparent Data Encryption which is a technology used to solve the problems of security of data. Transparent Data Encryption means encrypting databases on hard disk and on any backup media. Present day global business environment presents numerous security threats and compliance challenges. To protect against data thefts and frauds we require security solutions that are transparent by design. Transparent Data Encryption provides transparent, standards based security that protects data on the network, on disk and on backup media. It is easy and effective protection of stored data by transparently encrypting data. Transparent Data Encryption can be used to provide high levels of security to columns, table and tablespace that is database files stored on hard drives or floppy disks or CD's, and other information that requires protection. It is the technology used by Microsoft SQL Server 2008 to encrypt database contents. The term encryption means the piece of information encoded in such a way that it can only be decoded read and understood by people for whom the information is intended. The study deals with ways to create Master Key, creation of certificate protected by the master key, creation of database master key and protection by the certificate and ways to set the database to use encryption in Microsoft SQL Server 2008.
ArXiv
Anwar Pasha Deshmukh Riyazuddin Qureshi
20181133
An Appraisal to Assess the Security of Database Configurations
Database Management Systems (DBMS) have a long tradition in high security and several mechanisms needed to protect data have been proposed/consolidated in the database arena. However, the effectiveness of those mechanisms is very dependent on the actual configuration chosen by the database administrator. Tuning a large database is quite complex and achieving high security is a very difficult task that requires a lot of expertise and continuous and proactive work. In this paper we present an assessment tool aimed at evaluating the security of DBMS configurations. The proposed tool is simple and effective, and can be used by administrators with very little security knowledge. We evaluate the tool by performing the assessment of four different real database installations based on four well known and widely used DBMS engines.
2009 Second International Conference on Dependability
Afonso Araujo Neto Marco Paulo Amorim Vieira H Madeira
167591480
Study on Security of Database
Based on the analysis of database security system,five database security management methods were presented in this paper.
Qiao Jin-you
65391829
Principles of Database Security
Database Security, is a current steering topic among academicians, researchers and industry. This book is designed to give a broad overview of strategies to secure data efficiently. The modern trends of database security have been dealt from basic principles and terminologies in easily understandable English language so as to enable the reader to understand with minimal effort. Several algorithms are discussed with experimental evaluation which makes the book a practical guide for students who wish to work in the area of database security.This book would serve as an ideal guide for B.E. B.Tech. B.S. B.Sc, B.C.A. undergraduate students of Computer Science, Information Technology, Electronics Communication who wish to take up projects on database security. Students pursuing postgraduate course in Science and Engineering, M.E. M.Tech. M.S. M.Sc. M.C.A. students will find this book useful for their projects. Research Scholars working in the area of database security will find this book as a handy reference guide for their M.Phil. and Ph.D. works. Software Engineers involved in IT and ITES sector specifically working on databases would find this book as a useful resource
S Balamurugan Sampath Charanyaa
112790326
Security of Database
Today, a lot of government departments and merchandising concern store a large amount of information in the computer database and as important resources,which are even linked to the rise and decline of enterprise and department. With the wide application of the computer database system, the security of database is being paid attention to by us too.
Qin Li-bo
17154602
On the Security of Password Manager Database Formats
Password managers are critical pieces of software relied upon by users to securely store valuable and sensitive information, from online banking passwords and login credentials to passport and social security numbers. Surprisingly, there has been very little academic research on the security these applications provide.
ESORICS
Paolo Gasti Kasper Bonne Rasmussen
64154780
The security of database server
The importance of database security was expatiated and the types of database security leaks were explained briefly from the aspects of database complexity, damage caused by inferior database security and the foundation of database etc. SQL Server and Oracle were taken as examples to introduce the immature aspects of database security characteristics, database password management, operating system back door and other database leak areas. The database security was summarized. New demonstrations of the database security preservation were put forward. And a beneficial trial on preserving database security and on structuring database was made.
Han-Jyun Su
64089578
Information security of database networks
Hirotsugu Kinoshita Shigeo Tsujii
32934976
A Generic Construction of Quantum Oblivious Key Transfer Based Private Query with Ideal Database Security and Zero Failure
Higher security and lower failure probability have always been people's pursuits in quantum oblivious key transfer based private query (QOKT PQ) protocols since Jacobi et al. [Phys. Rev. A 83, 022301 (2011) proposed the first protocol of this kind. However, higher database security generally has to be obtained at the cost of a higher failure probability, and vice versa. Recently, based on a round robin differential phase shift quantum key distribution protocol, Liu et al. [Sci. China Phys. Mech. Astron. 58, 100301 (2015) presented a private query protocol (RRDPS PQ protocol) utilizing ideal single photon signal which realizes both ideal database security and zero failure probability. However, ideal single photon source is not available today, and for large database the required pulse train is too long to implement. Here, we reexamine the security of RRDPS PQ protocol under imperfect source and present an improved protocol using a special "low shift and addition" (LSA) technique, which not only can be used to query from large database but also retains the features of "ideal database security" and "zero failure" even under weak coherent source. Finally, we generalize the LSA technique and establish a generic QOKT PQ model in which both "ideal database security" and "zero failure" are achieved via acceptable communications.
IEEE Transactions on Computers
Chun-Yan Wei Xiao-Qiu Cai Bin Liu Tianyin Wang Fei Gao
64752606
Continuous Auditing of Database Applications: An Embedded Audit Module Approach1
This paper demonstrates an approach to address the unique control and security concerns in database environments by using audit modules embedded into application programs. Embedded audit modules (EAM) are sections of code built into application programs that capture information of audit significance on a continuous basis. The implementation of EAMs is presented using INGRESS a relational database management system. An interface which enables the auditor to access audit related information stored in the database is also presented. The use of EAMs as an audit tool for compliance and substantive testing is discussed. Advantages and disadvantages of employing EAMs in database environments and future directions in this line of research are discussed.
S Michael Groomer Uday S Murthy