Basic Concept on Data Security & Authentication
Entity Level Security
The security system is greatly strengthened by database authorization. Even then, security breaches do occur. Various unauthorized persons breach security through database misuse and accidents. But this is not desirable at all in case of database. Therefore, a security method called encryption is used in the database management system to further strengthen the security system.
Data Recovery
Database data is lost when the computer system fails or crashes due to any reason. The process by which this lost data can be recovered is called data recovery.
Failures are of various types, namely-
(i) Transaction Failure
(ii) Logical Error
(iii) System Error
(iv) System Crash
(v) Disk Failure
Authorization
Authorization is a process by which database security can be controlled. A database user can have different types of authorizations. This is dependent on database security. When the query processor translates a query, it considers the user's authorization level.
Level of Authorization
There are 4 levels of authorization namely--
(i) Real Authorization
(ii) Insert Authorization
(iii) Update Authorization
(iv) Delete Authorization
The different levels of authorization are described below:
(i) Real Authorization: This allows a user to read data only, but not any modification.
(ii) Insert Authorization: This level of authorization allows a user to not only insert new data into the database.
(iii) Update Authorization: With this level, a user is given permission or authority to modify the data stored in the database, but not to delete any data.
(iv) Delete Authorization: With this level, a user is given the authority to delete data in the database.
Grant of authorization:
A user is granted the following authorizations, namely—
(i) Index Authorization: With this level of authorization a user can create and delete indexes.
(ii) Resource Authorization: With this level a user can create new relations in the database.
(iii) Alternate Authorization: This level of authorization allows a user to delete attributes of a relation or add new attributes to it.
(iv) Drop Authorization: With the help of this, a user is given the authority to delete the database relation.
| Data Security & Authorization Technique
Database Security:
Just as data is important for any organization, it is also important to protect data privacy. Data security controls object-level database access and usage. Data CQT checks which objects and actions a user can access. For example, let's say a user named 'K' can select data in the results database but cannot delete it. This task can be provided through data security. The database administrator is responsible for protecting the privacy of data. Confidentiality is very important in how the database is managed and used in a multiuser environment.
Database security controls the following, namely--
(1) Not to use data without authorization.
(2) Reserving the User's Right to Use Data.
(3) Control system resource usage.
(4) Controlling disk usage.
(5) Controlling User Actions.
(6) Determining user data usage limits.
Database security can be broadly divided into 2 parts namely--
(1) System security and
(2) Data Security.
System Security : 2 aspects of system security are--
(a) checking whether the user is authorized to use the database and the user name and password;
(b) Checking the amount of space reserved for user data.
Data Security: In terms of data security, a user can use any object and check what kind of work can be done. For example, a user named 'B' can select the data in the Customer database but cannot delete it.
Comments
Post a Comment