Security model for relational database systems

Assignment Help Basic Computer Science

Reference no: EM133985396

Discussion

In this forum, you are to choose a security model for relational database systems (Discretionary Access Control models: System R Authorization Model, Content-Based and Fine-Grained Access Control, RBAC, or Mandatory Access Control model). Then use an example of a real-life application (healthcare system, military system, school system, banking system, etc..), and discuss how features from this model can be used to support complex policies. Please give examples of such policies, (e.g. "Doctors cannot read patients information unless they are their primary care provider") and indicate which current (or older) commercial database systems implement the discussed features.

For example, if you select the multilevel model, you can take the example of a military database system, in which users' security level can be based on their military rank (General are granted a Top Secret Clearance, while Lieutenants are granted a Confidential clearance, etc.), and in which categories can correspond to the continent where they are deployed. Relations in the database are also labeled with a security level (Top Secret, Secret,...) and a category. Policies such as "Lieutenants cannot read Top Secret Documents", or "Lieutenants can read Confidential documents only for the continent where they are deployed. " can be supported by this model. The label security mechanism in Oracle implements these feature

Reference no: EM133985396

Questions Cloud

Data for human heights or for human weights : When analyzing data sets, such as data for human heights or for human weights, a common step is to adjust the data.

Different challenges that are faced in digital forensics : Provide a summary of two real-life scenario case studies for two different challenges that are faced in digital forensics,

Discuss both sides of the fence : Discuss both sides of the fence. Offer examples of behaviors where there is an evident lack of buy-in for various security compliance requirements.

Variety of cyber threat actors : As a professional in field of cybersecurity, you should be aware of best-practice tactics and methods necessary for responding to variety of cyber threat actors

Security model for relational database systems : You are to choose a security model for relational database systems (Discretionary Access Control models: System R Authorization Model,

Compare the time taken for encryption and decryption : Measure and compare the time taken for encryption and decryption using DES, 3DES and AES, with different input sizes

Breaches in information security : breaches in Information security. What techniques were used to carry out the breach? What could have been done to prevent the breach?

What is the purpose of virtualization technology : What is the purpose of Virtualization technology? Here you should write the benefits of Virtualization technology.

Introduction to intrusion detection : Since our first session serves as our introduction to intrusion detection,

User Account

All Pages