Security of databasesTopics

The main concepts, purpose and role of databases in information systems are studied within the subject. the principles of structured storage, management and processing of data are reviewed. the main characteristics and differences of hierarchical, network, relational and document-oriented data models are explained. it also examines the general architecture of database management systems (dbms), their main components, and their interactions.

The main principles of the relational data model and the basic concepts of the SQL query language are studied within the subject. tables, rows and columns, as well as the role of primary and foreign keys in structuring data and establishing relationships between tables are explained. concepts of relationship, attribute, and domain, and their functions in the relational data model are reviewed. the structure of SQL statements, basic data types, system functions and the principles of using operators are also examined.

The main categories of the structured query language (sql) and the principles of working with databases are studied within the subject. the purpose, main features, and role of the ddl, dml, dcl, and TCL commands in database management are explained. the principles of writing SQL queries for selecting and processing data, filtering data using WHERE and ordering results using ORDER BY are reviewed. application of aggregate functions for data summarization and statistical processing is also investigated.

Verilənlər bazalarının ehtiyat nüsxələnməsinin məqsədi və məlumatların itirilməsindən qorunma prinsipləri izah edilir. tam (full) və əlavə (incremental) backup növləri, bərpa prosesləri və məlumatların davamlılığının təmin edilməsi üsulları araşdırılır.

Sql-də view-ların, istifadəçi tərəfindən müəyyən edilən funksiyaların, saxlanılan prosedurların və triggerlərin təyinatı və iş prinsipi araşdırılır. bu mexanizmlərin verilənlər bazasında avtomatlaşdırma və məlumatların

Within the subject, the main stages of systematic and efficient design of databases are studied. the principles of collecting and analyzing database requirements, modeling objects, attributes and relationships between them through er-diagrams are reviewed. the properties of 1nf, 2nf, 3nf and boyce–codd normal forms are explained in order to structure data and reduce duplication. also, methods of table decomposition and elimination of anomalies that may arise during data addition, update and deletion are investigated.

Verilənlər bazasında indekslərin məqsədi, əsas növləri və onların sorğuların icrasına təsiri araşdırılır. sorğuların icra planlarının təhlili və verilənlər bazasının performansının yaxşılaşdırılması üsulları öyrənilir.

Mövzu çərçivəsində verilənlər bazalarında əsas təhlükəsizlik məsələləri və girişin idarə olunması prinsipləri öyrənilir. verilənlərin məxfiliyinə, bütövlüyünə və əlçatanlığına təsir edən əsas təhdid və zəifliklər nəzərdən keçirilir. i̇stifadəçilərin identifikasiyası, autentifikasiyası və avtorizasiyası, eləcə də verilənlər bazası resurslarına giriş hüquqlarının müəyyən edilməsi prinsipləri izah edilir. həmçinin minimal səlahiyyət, vəzifələrin ayrılması və istifadəçi fəaliyyətlərinə nəzarət kimi əsas təhlükəsizlik yanaşmaları araşdırılır.

In the framework of the topic, the principles of access management and control of user activities in databases are studied. the possibility of using views to provide limited and targeted access to data is considered. the principles of creating security logs and audit trails, recording user activities, and tracking database operations are explained. it also examines the role of log and audit data in detecting unauthorized activity, investigating security incidents, and ensuring accountability.

Within the scope of the topic, the basic concepts, reasons for creation and application features of nosql databases are studied. the principles of document-oriented databases storing and managing data in the form of structured documents are reviewed. the mongodb example explains the main features of documents, collections, and flexible data schemas. also, nosql databases are compared with relational database management systems in terms of data model, schema structure, scalability, and application areas.

Within the framework of the topic, the principles of securing the postgresql database system at the network level are studied. the role and application characteristics of firewall, proxy and VPN technologies for protecting access to the database over the network are reviewed. the laboratory exercise simulates the configuration of firewall rules, the organization of a secure connection to the database through proxy and vpn. methods for analyzing network logs, identifying suspicious connections and potential security incidents are also explored.

Within the scope of the topic, the nature of SQL injection attacks, their causes and their effect on the security of databases are studied. the mechanism by which malicious SQL queries are transmitted to the database through the application as a result of improper validation of user inputs is explained. the main types of SQL injections, detection attacks, and possible consequences such as unauthorized access, modification, or deletion of data are reviewed. methods to prevent SQL injections through parameterized queries, input validation, the principle of least authority, and other secure programming approaches are also explored.

Within the framework of the topic, the main security mechanisms applied to protect databases accessible over the internet are studied. data encryption, protection of network access through proxy servers and firewalls, as well as the role of digital signatures and certificate authorities in ensuring secure communication are considered. the lab exercise uses tools such as sqlmap, dbshield, greenbone/openvas, and nmap to detect vulnerabilities and assess the security posture of databases and related systems. it also examines the implementation of security scans, analysis of the obtained results, preparation of reports and formulation of appropriate recommendations for elimination of identified vulnerabilities.

Within the framework of the topic, the principles of managing transactions in databases and the safe organization of data access by several users or processes at the same time are studied. atomicity, consistency, isolation, and durability (acid) properties that ensure the reliable execution of transactions are considered. isolation levels and their characteristics are explained to control the interaction of transactions during concurrent access. the application of blocking mechanisms to protect data integrity and prevent conflicting operations is also investigated.