Towards a Security Benchmark for Database Management Systems

Authors:
Henrique Madeira
Affiliations:
University of Coimbra
Venue:
DSN '05 Proceedings of the 2005 International Conference on Dependable Systems and Networks
Year:
2005

Citing 0
Cited 3

A data masking technique for data warehouses

Proceedings of the 15th Symposium on International Database Engineering & Applications
Security Gaps in Databases: A Comparison of Alternative Software Products for Web Applications Support

International Journal of Secure Software Engineering
Architecture-based resilience evaluation for self-adaptive systems

Computing

Quantified Score

Hi-index	0.00

Visualization

Abstract

One of the main problems faced by organizations is the protection of their data against unauthorized access or corruption due to malicious actions. Database management systems (DBMS) constitute the kernel of the information systems used today to support the daily operations of most organizations and represent the ultimate layer in preventing unauthorized access to data stored in information systems. Nevertheless, in spite of the key role played by the DBMS in the overall data security, no practical way has been proposed so far to characterize the security in such systems or to compare alternative solutions concerning security features. This paper proposes an approach to characterize the security mechanisms in database systems and database applications, according to a set of security classes. The proposed approach is generic and can be applied to both DBMS (relevant for system integrators) and real database installations (relevant for database administrators and end-users).