Database Security

Description

This course focuses on the principles, technologies, and practices used to protect databases and the information they contain from unauthorized access, modification, disclosure, and destruction. It covers database security architecture, authentication and authorization mechanisms, access control models, encryption, secure database configuration, auditing and monitoring, SQL injection attacks, data protection, backup and recovery security, and database security policies. Students will also examine common database vulnerabilities and learn how to apply appropriate security controls to ensure the confidentiality, integrity, and availability of database systems.

Course learning outcomes

1. 1

   CLO 1: Knows the main functions of database management systems. is able to work with several dbmss currently in use. knows how the system catalogs of relational dbmss operate and what information they contain. is able to perform database auditing and logging for security and reliability.

2. 2

   CLO 2: Is able to implement initial security measures in dbmss by managing user profiles, password policies, permissions (rights/access), and roles.

3. 3

   CLO 3: Knows the causes of database availability problems and understands backups, synchronization between them, and load-balancing methods.

4. 4

   CLO 4: Knows methods for preserving integrity in databases. is able to implement various encryption methods and solutions at different levels in databases (file system, table, column, etc.).

5. 5

   CLO 5: Is aware of threats originating from application software. knows SQL injection and related threats, as well as methods for preventing them.

6. 6

   CLO 6: Knows nosql-type databases, their operating principles, practical significance, and their advantages and disadvantages compared with traditional dbmss.