Database Security: Problems and Solutions

Cover
Title Page
Copyright
Dedication
Contents
Preface
Chapter 1: Introduction to Information Security, Data Security, and Database Security
	1.1 Information Security
		Confidentiality
		Integrity
		Availability
	1.2 Security Threats, Controls, and Requirements
		Security threats
		Security controls
		Security requirements
	1.3 Data Security
	1.4 Database Security
		Data confidentiality
		Data integrity
		Data Availability
	1.5 Summary
Chapter 2: Database Design
	2.1 Normalization
	2.2 Surrogate Keys and Data Integrity
	2.3 Normalization, Access Restrictions, and Beyond
	2.4 Summary
Chapter 3: Database Management and Administration
	3.1 Backup and Recovery
		Backup and restore of a specific database
		Backup and restore of multiple specific databases
		Backup and restore of specific tables
		Backup of users, privileges, and other components
		Deciding what to backup
	3.2 User Account Security Configurations
		Password expiration
		Disabling/enabling user accounts
	3.3 Summary
Chapter 4: Database User Accounts
	4.1. Creating and Removing Database User Accounts
	4.2. Listing User Accounts
	4.3 Host-Restricted Accounts
	4.4 Summary
Chapter 5: Database Privileges
	5.1 Overview of Privileges and Database-Level Privileges
	5.2 Capability to Manage Privileges
	5.3 Listing Privileges
	5.4 Removing Privileges
	5.5 Working with TLS and Table-Level Privileges
	5.6 TLS and Normalization Revisited
	5.7 Column Level Security (CLS)
	5.8 CLS and Evolving Data Access Requirements and Data
		The capability for CEO and CFO to read salary data
		The capability for employees to see address data
		The capability for executives to keep private notes in the budget table
	5.9 Row Level Security
	5.10 Summary
Chapter 6: Roles
	6.1 Defining Role Members and Data Access Requirements
	6.2 Creating a Database Role, Showing Role Privileges, and Removing a Role
	6.3 Assigning Privileges to Roles
	6.4 Database Users and Role
		Adding and removing a database user to a role
		Listing, setting, and testing a user\'s role
		The default role
		Listing privileges and roles revisited
	6.5 Roles and Evolution
		A new employee is hired
		An employee adds a role or moves to another role
		An employee leaves a role or the organization
	6.6 Summary
Chapter 7: Database Security Controls for Confidentiality
	7.1 Views
		Concept of a view
		Creating a view
		Showing a list of views and a view definition
		Accessing the data of a view
		Security considerations of a view
		Deleting and redefining views
		Views and multiple data access requirements
	7.2 Encryption, Decryption, and Hashing
		Encryption
		Decryption
		Hashing
		Salting
	7.3 Stored Routines
		Stored functions
		Stored procedures
		Revisiting the password authentication implementation
	7.4 Summary
Chapter 8: Transactions for Data Integrity
	8.1 Commits, Rollbacks, and Automatic Commits
	8.2 Beginning a Transaction with COMMIT or ROLLBACK
	8.3 Beginning a Transaction with START TRANSACTION
	8.4 Condition Issued COMMIT or ROLLBACK
	8.5 Exception Issued ROLLBACK
	8.6 A Larger Demonstration of Transactions
	8.7 Summary
Chapter 9: Data Integrity with Concurrent Access
	9.1 Concurrent Access and Backups
	9.2 Concurrent Access with DML Statements
		Table-level locking
		Row-level locking
			UPDATE locks
			SHARE locks
	9.3 Deadlock
	9.4 Summary
Appendix
Index