Database Security System Research Articles

Utilizing Blockchain Technology to Secure Database from Unauthorized Modifications

Centralized database-based applications are frequently susceptible to internal threats. The data stored in a relational database can be changed by any user who has administrative access to the hosting server or database system. Moreover, this kind of user may alter the associated log files, which would make it very challenging to identify any illegal alteration. It would also be difficult to attribute the assault to privileged users as well. In this study, we propose a solution to build a service on the context of student score management based on Blockchain technology. A database system based on the Blockchain platform along with accompanying services is built to allow storage and query of student learning outcomes. The database security system operates in parallel with the current system while still ensuring transparency, security and integrity of data. We develop a verification module that uses Blockchain to verify the integrity of the corresponding tuples and identify any unwanted modifications. Oracle database, RESTful API, and Hyperledger Fabric have all been used in the implementation of our method. Our findings show that the overhead of integrity checking remains constant per tuple in the results of a query and increases linearly using real data and SQL queries of different types and complexity.

A novel hybrid database security management technique

Since the advent of the internet and the digitization of information, more individuals and organizations have gained access to the internet, leading to a significant expansion in the size of our database systems. These databases are relied upon for day-to-day activities by individuals and organizations. Furthermore, the advancements in technology have increased the vulnerability of database management systems and enforcing adequate database security measures is of paramount importance to individuals and organizations. In this study, we deployed a hybrid approach to database security system that integrates two techniques: dynamic time-warping algorithm and voice recognition methods. The implementation follows Object-Oriented Analysis and Design procedures, utilizing SQL Management Studio 2014 for the backend and ASP.NET C# for the frontend. Our hybrid approach demonstrates enhanced database security compared to previously employed authentication measures.

IMPROVEMENT OF DATABASE PROTECTION SYSTEM FROM UNAUTHORIZED MODIFICATION BASED ON BLOCKCHAIN TECHNOLOGY AND PROOF-OF-WORK CONSENSUS ALGORITHM

In today's digital world, there is an active use of databases, and the relevance of protecting them is growing every day. After all, databases can contain a wide range of confidential information (personal, financial, government, commercial, etc.), unauthorized access to which will lead to irreversible negative consequences, including material damage, reputational losses, and even legal problems. In addition, the number and complexity of cyberattacks is growing every day. Attackers use various methods to gain unauthorized access to databases, such as the use of software vulnerabilities, social engineering methods, brute force attacks, etc. Therefore, the problem of increasing the security of databases against unauthorized modification is of great importance. In this regard, this paper proposes to address this issue by using blockchain technology in combination with the Proof-Of-Work consensus algorithm, which ensures the security and integrity of the system, and helps prevent fraud and abuse by using cryptographic methods to protect the blockchain from unauthorized access and modification. It is also worth noting that the Proof-of-Work algorithm has a number of other advantages, such as decentralization, transparency, and data immutability after it is added. Thus, to achieve the goal, the subject area was analyzed, the known methods on which the operation of database security systems is based were investigated, the architecture and algorithm of the security module were created, which allows for decentralized data storage and, accordingly, increases the level of their security by using a special consensus protocol to coordinate the contents of the registry, as well as cryptographic hashing algorithms and electronic digital signatures to ensure the integrity of the parameter transfer transaction.

Architecture of intelligent SIEM for detecting cyber incidents in databases of military information and communication systems.

The article looks at the current supply of cyber defense to the databases of information and communication systems. The effectiveness of continuous visits to databases is analyzed. The analysis indicates that existing systems are not immune to security, which is a critical aspect in the field of cybersecurity. A new approach to the architecture of the SIEM system is being introduced, which is aimed at different parts of the protection circuit of the information and communication system. The fragmented architecture makes it possible to effectively detect and respond to cyber attacks at all levels of protection, from the operating system to databases. A new approach is being introduced to ensure cyber security of databases with the benefit of the intelligent capabilities of the SIEM system. The main aspect of this architecture is rich database protection, which allows you to effectively detect and respond to cyber attacks. The registration approach includes the addition of data from different levels to the security circuit of the information and communication system, the module for analyzing data about categories in the database, which operates on the basis of The use of fuzzy multiplicity theory methods, fuzzy logic inference and rule correlation module to improve the detection of cyber incidents. And also the integration of OLAP technologies to provide a deep and analytical view of the database security system. The architecture for identifying cyber incidents has been designed to improve the efficiency of identifying cyber incidents related to the functioning of the database of information and communication systems and. The result of the investigation is a reduction in the capabilities of the SIEM system in identifying and responding to cyber identities in the database of the military information system. Further, we directly monitor the operational model of the cybersecurity system of the information and communication system database.

Sistem Keamanan Database

This research is conducted with the aim of database security and protecting users' personal information. The study focuses on the database security system, which is an essential aspect in the field of information technology. The research is carried out by conducting a literature review and case studies on various existing database security systems. The fundamental concepts of the database security system, types of database security systems, and the latest technologies that can be used to enhance database security are explained in this research. Furthermore, the potential risks that can arise when the database security system is not properly maintained and strategies to address database security issues are also discussed. This research is expected to provide a better understanding of the importance of maintaining database security for organizations and companies.

Mitigation of Database Security Threats in Transaction Processing System

The main function of the transaction processing system (TPS) in the business world is to handle data transactions. Hence, it is crucial to secure the database, we discuss the problem of database threats in a transaction processing system in this article. A transaction process system (TPS) refers to an information processing system for business transactions that collects, modifies, and retrieves all transaction data. Database security denotes the safeguarding of database management systems using a variety of strategies against malicious cyberattacks, unlicensed access, and illegitimate use. The elements that need to be protected by database security systems include the data that has to be stored, the database where it is stored, and the database management system used to administer the data. It involves safeguarding the system from harm, infiltration, and exploitation. Additionally, it safeguards any database-related applications. The aim of this study is to explore possible database security threats in a TPS, along with some security challenges, and mitigation techniques to these threats.

ПРОБЛЕМИ БЕЗПЕКИ УНІВЕРСАЛЬНИХ ПЛАТФОРМ УПРАВЛІННЯ ДАНИМИ

The article deals with the security of universal management systems. The analysis and classification of modern management systems by different criteria has been made. Based on the analysis of the literature and the experience of creating corporate systems, two approaches to the organization of universal management systems have been identified: the use of multimodel systems and integrated management platforms. Based on the analysis of threats and protection tools for database management systems SQL, NoSQL, NewSQL, Data Warehouse, Data Lake and clouds, the main approaches to protection of each product category have been identified. The current trends in the development of management technologies and security have been identified. The development of NoSQL, NewSQL systems and the exchange of functionalities between them has led to the development of systems, which have functions of many classes. The problems of protection for multimodel database management systems and for integrated platforms have been identified and ways to overcome the identified problems have been suggested. For a universal management platform, it is not enough to combine security features of different types of DBMS but new approaches are needed. The Data Centric Security approach is suitable for integrated environments; it is focused on protecting critical at all stages of their processing - from collection and transmission to analysis and deployment in warehouses. The organization of access to through logical marts using semantic technologies, ontological models provides the transformation of a set of different types of into a single array by data virtualization. The article has substantiated the relevance and feasibility of the use of cognitive technologies and artificial intelligence in the field of information security, which opened new opportunities for the creation of automated, smart security tools for management systems. Such systems have the ability to self-analyse and configure. The use of machine learning technology allows to identify weaknesses in the database security system. The combination of intelligent security and management solutions with database technologies will allow developers to respond quickly to new challenges in the protection of integrated management systems of various types.

MARKOV DECISION POLICY BASED DATABASE SECURITY

An advanced database security system using Markov based policy is proposed. In large databases in this work, along with it’s a difficult task to keep the data up to date where huge data of dynamic nature occurs. In e-commerce sites, large data lands up and the database might not get updated. This causes staleness in data and also, if the database undergoes updation, it might not be available for access during that time. Sometimes, updation is not possible without human intervention, hence Markov based policy is used which would perform fixed interval updates effectively and lead to cost savings. In addition to updation, this policy can be used for the security of the system;the proposed system has a middleware that will restore the database using the Markov updation policy in case of attack. The middleware will process the changes in the data and display the details of the attacker and also the changes done by the attacker. Thus, this database system can also be secured using the Markov policy and this three layered security framework.

Securing Relational Databases with an Artificial Immunity Features

Database security is considered one of the major computer science research trends because of its importance in maintaining the privacy, integrity, and confidentiality of data. Human immune system is a set of defense mechanisms that can be used to defend the body against diseases caused by pathogens. Artificial immune system is the artificial simulation of human immunity that can be applied to computer security applications. The main goal of this paper is to develop a database security system based on danger theory. Danger theory is one of the most recent algorithms of artificial immunity that can provide interactive features for securing relational databases. By merging the developed features of artificial immunity to the security system, the secrecy of the database can be maintained.

A Study on Scanning and Masking Vulnerable DB Object

For infringements by hacking databases for storing personal information, penalties and correctional orders are imposed. For enforcing the act of personal information protection enacted by the korea’s national assembly, it is necessary to analyze database vulnerability and to study how to enhance security. This study aims to examine the limit of the personal information database security system and to design DB scansoftware and a method for analyzing vulnerable objects. Another aim is to establish security levels of the scan result, to create a vulnerable object scanrule of the DB for constructing a vulnerable object information protection system of the DB, and to construct a hardware and software access control system. It is still another aim to examine the scan result of the vulnerable object access control system to analyze creation of database masking.

Using Systems Thinking to Teach ERP Project Implementation (TERPPJ)

 Abstract—This paper presents a system model of ERP implementation based on nowadays case study and literatures. The relationships in the model are designed to be simple and functional and do not necessarily represent any particular business environments. It is meant to be a generic ERP implementation conceptual model with implications for MIS/CIS project management related course instructional design. It allows ERP project management instructors to move away from the discrepancy between the courses and body of knowledge. It is meant to be a generic ERP implementation conceptual model with implications for any business processes. The interrelationships of five primary sectors that are at the database security system are presented in this paper. The ERP implementation system model consists of five sectors: a) company characteristics, b) ERP implementation plan, c) communication, d) user, and e) technology management.

Integrated Database Security System Architectures based on WCF Services

Database security is a set of mechanisms, rules, and procedures that can be used to ensure confidentiality, integrity, and availability of data to protect database from unintended activities. The main goal of this paper is to provide integrated database security system architectures based on Windows Communication Foundation (WCF) services using a set of effective database security policies. Applying WCF services to the system can enhance the performance between all clients and database server and this is considered as one of the major contributions in this paper. The diversity of security policies in this paper depends on controlling database administrators and users who may abuse their privileges to penetrate confidential data in the database server. The controlling process depends on applying WCF services to a set of novel algorithms to provide efficient, flexible, and harmonious secret sharing connections between database users, database administrators, and super administrator in order to prevent any hostile act.

A Secure Database Encryption Scheme

The need to protect database, would be an every growing one especially so in this age of e-commerce. Many conventional database security systems are bugged with holes that can be used by attackers to penetrate the database. No matter what degree of security is put in place, sensitive data in database are still vulnerable to attack. To avoid the risk posed by this threat, database encryption has been recommended. However encrypting all of database item will greatly degrade the performance of the database system. As an optimal solution this paper presents a database encryption scheme that provides maximum security, whilst limiting the added time cost of encryption and decryption.

다양한 크기의 데이터 그룹에 대한 접근 제어를 지원하는 데이터베이스 보안 시스템

최근 병원 및 은행 등의 대규모 데이터베이스에 접근하는 사용자의 요구 사항이 다양해짐에 따라 데이터베이스 보안에 대한 중요성도 커졌다. 기존의 접근 제어 정책을 이용한 데이터베이스 보안 모델들이 존재하지만 이들은 복잡하고, 다양한 유형의 접근제어를 원하는 사용자의 보안 요구를 충족시키지 못한다. 본 논문에서는 데이터베이스를 접근하는 각 사용자별로 다양한 크기의 데이터 그룹에 대한 접근 제어론 제공하며, 임의의 정보에 대한 사용자의 접근 권한의 변화를 유연하게 수용하는 데이터베이스 보안 시스템을 제안하였다. 이를 위해 다양한 크기의 데이터 그룹을 테이블, 속성, 레코드 키에 의해 정의하였고, 사용자의 접근 권한은 보안 등급, 역할과 보안 정책들에 의해 정의하였다. 제안하는 시스템은 두 단계로 수행된다. 제 1단계는 수정된 강제적 접근 제어(Mandatory Access Control: MAC)정책과 역할 기반 접근 제어(Role-Based Access Control: RBAC)정책에 의해 수행된다. 이 단계에서는 사용자 및 데이터의 보안 등급과 역할에 의해 접근이 제어되며, 모든 형태의 접근 모드에 대한 제어가 이루어진다. 제 2단계에서는 수정된 임의적 접근 제어(Discretionary Access Control: RBAC)정책에 의해 수행되며, 1단계 수행결과가 다양한 크기의 데이터 항목에 대한 read 모드 접근제어 정책에 따라 필터링되어 사용자에게 제공한다. 이를 위해 사용자 그룹은 보안 등급에 의한 그룹, 역할에 의한 그룹, 사용자 부분집합으로 이루어진 특정 사용자 그룹으로 정의하였고 Block(s, d, r) 정책을 정의하여 특정 사용자 5가 특정 데이터 그룹 d에 'read' 모드, r로 접근할 수 없도록 하였다. 제안한 시스템은 사용자별 데이터에 대한 접근 제어가 복잡하게 요구되는 특정 유전체 연구 센터의 정보에 대한 보안 관리를 위해 사용하였다.안성, 동진벼는 안성, 서산 및 화순, 삼강벼는 안성, 서산, 화순 및 계화도 그리고 용문벼는 안성과 충주였다. 유지보수성을 증대할 수 있는 잇점을 가진다.역되어 MC-3에서 수행된다.위해 가상현실 기술을 이용한 컴퓨터 지원 교육훈력 시스템(CATS ; Computer Assister Training System)을 개발 중이며 일부 개발부분을 소개하였다.하며, 제 2선적제도의 발달과 해운경영의 국제성에 맞추어 근해해역에서 활동하는 우리나라의 선박에대해서 부분적으로 선박의 국적을 점차 개방시켜 나가는 정책을 검토해야 할 단계라는 것이다. 이러한 점에 있어서 지난 30여년간 외항해운부문에 중점을 두어온 우리나라의 해운정책은 이제 근해해운정책의 개발에도 관심을 기울여야 하는 전환점에 있다고 할 수있다.의 목적과 지식)보다 미학적 경험에 주는 영향이 큰 것으로 나타났으며, 모든 사람들에게 비슷한 미학적 경험을 발생시키는 것 이 밝혀졌다. 다시 말하면 모든 사람들은 그들의 문화적인 국적과 사회적 인 직업의 차이, 목적의 차이, 또한 환경의 의미의 차이에 상관없이 아름다 운 경관(High-beauty landscape)을 주거지나 나들이 장소로서 선호했으며, 아름답다고 평가했다. 반면에, 사람들이 갖고 있는 문화의 차이, 직업의 차 이, 목적의 차이, 그리고 환경의 의미의 차이에 따라 경관의 미학적 평가가 달라진 것으로 나타났다.corner$</TEX>적 의도에 의한 경관구성의 일면을 확인할수 있지만 엄밀히 생각하여 보면 이러한 예의 경우도 최락의 총체적인 외형은 마찬가지로 <TEX>$\ulcorner$</TEX>순응<TEX>$\lrcorner$</TEX>의 범위를 벗어나지 않는다. 그렇기 때문에도 <TEX>$\ulcorner$</TEX>순응<TEX>$\lrcorner$</TEX>과 <TEX>$\ulcorner$</TEX>표현<TEX>$\lrcorner$</TEX>의 성격과 Due to various requirements for the user access control to large databases in the hospitals and the banks, database security has been emphasized. There are many security models for database systems using wide variety of policy-based access control methods. However, they are not functionally enough to meet the requirements for the complicated and various types of access control. In this paper, we propose a database security system that can individually control user access to data groups of various sites and is suitable for the situation where the user's access privilege to arbitrary data is changed frequently. Data group(s) in different sixes d is defined by the table name(s), attribute(s) and/or record key(s), and the access privilege is defined by security levels, roles and polices. The proposed system operates in two phases. The first phase is composed of a modified MAC (Mandatory Access Control) model and RBAC (Role-Based Access Control) model. A user can access any data that has lower or equal security levels, and that is accessible by the roles to which the user is assigned. All types of access mode are controlled in this phase. In the second phase, a modified DAC(Discretionary Access Control) model is applied to re-control the 'read' mode by filtering out the non-accessible data from the result obtained at the first phase. For this purpose, we also defined the user group s that can be characterized by security levels, roles or any partition of users. The policies represented in the form of Block(s, d, r) were also defined and used to control access to any data or data group(s) that is not permitted in 'read ' mode. With this proposed security system, more complicated 'read' access to various data sizes for individual users can be flexibly controlled, while other access mode can be controlled as usual. An implementation example for a database system that manages specimen and clinical information is presented.

Medical database security evaluation.

Users of medical information systems need confidence in the security of the system they are using. They also need a method to evaluate and compare its security capabilities. Every system has its own requirements for maintaining confidentiality, integrity and availability. In order to meet these requirements a number of security functions must be specified covering areas such as access control, auditing, error recovery, etc. Appropriate confidence in these functions is also required. The 'trust' in trusted computer systems rests on their ability to prove that their secure mechanisms work as advertised and cannot be disabled or diverted. The general framework and requirements for medical database security and a number of parameters of the evaluation problem are presented and discussed. The problem of database security evaluation is then discussed, and a number of specific proposals are presented, based on a number of existing medical database security systems.