JAWAHARLAL NEHRU TECHNOLOGICAL UNIVERSITY HYDERABAD

Course Objectives:

• To learn the security of databases
• To learn the design techniques of database security
• To learn the secure software design

Course Outcomes:

• Ability to carry out a risk analysis for large database.
• Ability to set up, and maintain the accounts with privileges and roles.

UNIT - I

Introduction: Introduction to Databases Security Problems in Databases Security Controls Conclusions Security Models -1: Introduction Access Matrix Model Take-Grant Model Acten Model PN Model Hartson and Hsiao’s Model Fernandez’s Model Bussolati and Martella’s Model for Distributed databases

UNIT - II

Security Models -2: Bell and LaPadula’s Model Biba’s Model Dion’s Model Sea View Model Jajodia and Sandhu’s Model The Lattice Model for the Flow Control conclusion Security Mechanisms: Introduction User Identification/Authentication Memory Protection Resource Protection Control Flow Mechanisms Isolation Security Functionalities in Some Operating Systems Trusted Computer System Evaluation Criteria

UNIT - III

Security Software Design: Introduction A Methodological Approach to Security Software Design Secure Operating System Design Secure DBMS Design Security Packages Database Security Design Statistical Database Protection & Intrusion Detection Systems: Introduction Statistics Concepts and Definitions Types of Attacks Inference Controls evaluation Criteria for Control Comparison. Introduction IDES System RETISS System ASES System Discovery

UNIT - IV

Models for the Protection of New Generation Database Systems -1: Introduction A Model for the Protection of Frame Based Systems A Model for the Protection of Object-Oriented Systems SORION Model for the Protection of Object-Oriented Databases

UNIT - V

Models for the Protection of New Generation Database Systems -2: A Model for the Protection of New Generation Database Systems: the Orion Model ajodia and Kogan’s Model A Model for the Protection of Active Databases Conclusions

TEXT BOOK:

• 1. Database Security by Castano Pearson Edition (lie) Database Security and Auditing: Protecting Data Integrity and Accessibility, 1st Edition, Hassan Afyouni, THOMSON Edition.

REFERENCE BOOK:

• 1. Database security by alfred basta, melissazgola, CENGAGE learning.