TAILIEUCHUNG - Lecture Database Systems - Lecture 31

After completing this chapter, students will be able to: Advanced issues in application development, including performance tuning, performance benchmarks, database-application testing, and standardization. | CSC271 Database Systems Lecture # 31 Summary: Previous Lecture Remaining steps/activities in Physical database design methodology Monitoring and performance tuning Security Chapter 19 Database Security Data is a valuable resource that must be strictly controlled and managed, as with any corporate resource Part or all of the corporate data may have strategic importance and therefore needs to be kept secure and confidential Mechanisms that protect the database against intentional or accidental threats Database Security Security considerations do not only apply to the data held in a database: breaches of security may affect other parts of the system, which may in turn affect the database Database security encompasses Hardware Software People Data Database Security Database security involves measures to avoid: Theft and fraud Loss of confidentiality (secrecy) Loss of privacy Loss of integrity Loss of availability Database Security Threat Any situation or event, whether intentional or unintentional, that will adversely affect a system and consequently an organization Threats to Computer Systems Typical Multi-user Computer Environment Countermeasures: Computer-Based Controls Concerned with physical controls to administrative procedures and includes: Authorization Access controls Views Backup and recovery Integrity Encryption RAID technology Countermeasures: Computer-Based Controls Authorization The granting of a right or privilege that enables a subject to have legitimate access to a system or a system’s object Authentication A mechanism that determines whether a user is who he or she claims to be Countermeasures: Computer-Based Controls Access controls Based on the granting and revoking of privileges Privilege A privilege allows a user to create or access (that is read, write, or modify) some database object (such as a relation, view, and index) or to run certain DBMS utilities Approaches used by DBMS Discretionary Access Control (DAC) Mandatory Access Control (MAC) .

• Cơ sở dữ liệu
• Database System
• Lecture Database Systems
• Relational databases
• Database design
• Performance benchmarks
• Advanced application development
• Performance tuning
• Database system concepts
• Lecture Database system concepts
• Database systems
• Database languages
• Database system architectures
• Relational database design
• Lecture Database System
• Database system architecture
• File based approach
• Data management systems framework
• Recovery system
• Database architecture
• Database approach
• Database design process
• Query optimization
• Transaction state
• Concurrency control
• Data analysis
• Information retrieval
• Parallel databases
• Distributed databases
• Advanced data types
• Advanced transaction processing
• Relational model
• Basic query structure
• Dynamic SQL
• Tuple relational calculus
• Entity relationship model
• Application design
• Object­ based databases