LESSON 8: DATABASE SECURITY
8.0 LEARNING OBJECTIVES AND OUTCOMES
Following are the security-related tasks which you as database administrator should be familiar with:
• Ensuring secure database installation and configuration.
• Managing the security aspects of user accounts: creating and assigning roles, developing secure password policies, restricting data access to only the appropriate users, and so on
• Ensuring secure network connections
• Encrypting and decrypting sensitive data
• Ensuring the database has no security vulnerabilities and protection against intruders
• Deciding what database components to audit and how granular you want this auditing to be
• Downloading and installing security patches you might be able to perform these …show more content…
Database uses security domains and schemas to control data access and to restrict use of various database resources.
Database security concerns the protection of database potentially including the data, stored functions, database application the database servers and the associated network links against compromises of their confidentiality, integrity and availability by the use of broad range of information security.
It includes various kinds or categories of controls such as technical, procedural/administrative and physical. Database security is a specialist topic within the broader realms of computer security, information security and risk management. database systems include Security risks like for example:
1. Unauthorized or unintended activity or misuse by authorized database users, database administrators, or network/systems managers, or by unauthorized users or hackers (e.g. inappropriate access to sensitive data, metadata or functions within databases, or inappropriate changes to the database programs, structures or security …show more content…
8.4 UNDERSTANDING USER ACCESS AND SECURITY

User account and password controls the user access but that is not sufficient to access the database in most major implementations. The creation of a user account is only the initial step in allowing access to the database as well as controlling that access.
After the creation of user account, the DBA, security officer or designated individual must be able to assign suitable system level privileges to a user for that user to be allowed to perform actual functions within the database such as creating tables or selecting from the tables. Moreover, the schema owner usually needs to grant database users access to objects in the schema in order to allow user to perform his job.
SQL provides two commands that allow database access control including the assignment or revocation of privileges. Following are the two commands used to allocate both system and object privileges in a relational database:
1. GRANT
2. REVOKE
8.5 MANAGING SECURITY FOR