database

Database Security – Part 2 Access Control Access Control Access Control refers to any means of controlling access to resources in a database. Can be seen as the combination of authentication and authorization plus additional measures, such as IP-based restrictions. Authentication vs. Authorization Authentication is the process by which a system can identify users. Who

Database Transactions – Part 1 Introduction Transaction – A Classical Example Scenario: Suppose that Steve’s account balance is $1000 and Bob’s balance is $200. Now Steve wants to transfer $500 into Bob’s account. There are several steps involved in transferring the money: 1 Check Steve’s balance; 2 Update Steve’s balance; 3 Check Bob’s balance; 4

Database Security – Part 3 SQL Injection A Survey A survey by GreenSQL (http://www.greensql.com, released on April 3, 2012) shows that the most critical database security concerns are: 51% SQL injection attacks from internal and external users 31% Internal threats, including unauthorized database access, database administrator errors, and data exposure to non- privileged internal users

Query Processing Query Processing – Overview 1 Users submit SQL queries to a DBMS. 2 The DBMS processes and executes them in a database. Note: SQL is a declarative language, so it is the task of DBMSs to decide how SQL queries should be executed. Query Processing – Example From: SELECT name FROM Person WHERE