Subject · Information security

Security of databases

İF-2209y5 creditsAutumn semesterMandatory3

About this subject

Credits

5

Workload

90hours

Semester

Autumn

Academic year

3

Description

The subject provides students with the formation of theoretical knowledge and practical skills on ensuring information security during the design, construction and operation of databases. within the scope of the subject, the basic concepts of databases and database management systems, security principles and sensitive data protection methods are studied. students learn the methods and tools used to identify and prevent SQL injection, unauthorized access, data breaches, and other security threats. authentication, authorization, access control, auditing and monitoring mechanisms in databases, as well as legal and regulatory compliance issues are considered. security features, risk management, and security incident response approaches specific to cloud-based and nosql databases are also explored. the subject is aimed at forming students' abilities to assess the security situation of databases, detect existing vulnerabilities and determine appropriate protective measures.

Course learning outcomes

  1. CLO 1: Knows the basic functions of database management systems. it is able to work with several of the vbiss used in modern times. knows how relational DBMS system directories work and what data resides in them able to perform database auditing and logging for security and reliability.

  2. CLO 2: Able to take basic security measures in VBIS by managing user profiles, password policies, permissions (rights/rights) and roles in vbis.

  3. CLO 3: Knows the causes of database availability problems, knows the methods of backup copies, synchronization between them, load balancing.

  4. CLO 4: Knows methods for maintaining completeness in databases. able to implement different encryption methods and solutions at different levels (file system, table, column, etc.) in databases.

  5. CLO 5: It is aware of threats from applications. SQL injection and threats from this background know how to prevent them.

  6. CLO 6: Knows nosql type databases, their working principles, practical importance, advantages and disadvantages of traditional databases.