Database Security and Auditing: Protecting Data Integrity and Accessibility

Note: Supplemental materials are not guaranteed with Rental or Used book purchases.

ISBN: 9780619215590 | 0619215593
Cover: Paperback
Copyright: 4/6/2005

Buy New

Print on Demand: 2-4 Weeks. This item cannot be cancelled or returned.

$157.27

Summary

Supplemental Materials

This groundbreaking approach to database security will prepare students for business applications in a non-database specific environment.

Introduction

xiii

Part I

Security Architecture

(32)

Introduction

(1)

Security

(1)

Information Systems

(4)

Database Management Systems

(2)

Information Security

(4)

Confidentiality

(1)

Integrity

(2)

Availability

(1)

Information Security Architecture

(1)

Database Security

(11)

Database Security Levels

(1)

Menaces to Databases

(7)

Asset Types and Their Value

(1)

Security Methods

(2)

Database Security Methodology

(1)

Database Security Definition Revisited

(1)

Chapter Summary

(1)

Review Questions

(2)

Hands-on Projects

(1)

Case Project

(1)

Operating System Security Fundamentals

(20)

Introduction

(1)

Operating System Overview

(2)

The Operating System Security Environment

(1)

The Components of an Operating System Security Environment

(5)

Services

(1)

Files

(1)

File Permissions

(2)

File Transfer

(1)

Sharing Files

(1)

Memory

(1)

Authentication Methods

(2)

Authorization

(1)

User Administration

(1)

Password Policies

(1)

Vulnerabilities of Operating Systems

(1)

E-mail Security

(1)

Chapter Summary

(1)

Review Questions

(1)

Hands-on Projects

(1)

Case Project

(1)

Endnotes

(2)

Administration of Users

(46)

Introduction

(1)

Documentation of User Administration

(2)

Operating System Authentication

(1)

Creating Users

(15)

Creating an Oracle10g User

(1)

Identified Clause

(1)

BY Password Option

(1)

Externally Option

(1)

Globally as external_name Option

(1)

Default Tablespace tablespace_name Clause

(1)

Temporary Tablespace tablespace_identifier Clause

(1)

Quota Clause

(1)

Profile Clause

(1)

Password Expire Clause

(1)

Account Clause

(1)

Creating an Oracle10g User Using Database Authentication

(4)

Creating an Oracle10g User Using External (Operating System) Authentication

(3)

Creating an Oracle User Using Global Authentication

(1)

Creating a SQL Server User

(6)

Windows Integrated (Trusted) Logins

(1)

Creating Windows Integrated Logins

(3)

SQL Server Login

(3)

Removing Users

(1)

Removing an Oracle User

(1)

SQL Server: Removing Windows Integrated Logins

(1)

Modifying Users

(3)

Modifying an Oracle User

(2)

SQL Server: Modifying Windows Integrated Login Attributes

(1)

Default Users

(2)

Oracle Server Default Users

(1)

SYS and ORAPWD Utility

(1)

SQL Server Default Users

(1)

Remote Users

(1)

Database Links

(3)

Authentication Methods

(2)

Linked Servers

(1)

Remote Servers

(1)

Practices for Administrators and Managers

(1)

Best Practices

(1)

Chapter Summary

(1)

Review Questions

(1)

Hands-on Projects

(1)

Case Projects

(3)

Profiles, Password Policies, Privileges, and Roles

(66)

Introduction

100

(1)

Defining and Using Profiles

100

(6)

Creating Profiles in Oracle

101

(4)

Creating Profiles in SQL Server 2000

105

(1)

Designing and Implementing Password Policies

106

(10)

What Is a Password Policy?

106

(1)

Designing Password Policies

106

(1)

Implementing Password Policies

107

(9)

Granting and Revoking User Privileges

116

(28)

Privileges in Oracle

116

(12)

Privileges in SQL Server

128

(8)

Table and Database Objects Privileges

136

(5)

Column-level Privileges

141

(3)

Creating, Assigning, and Revoking User Roles

144

(11)

Creating Roles with Oracle

144

(2)

Creating Roles with SQL Server

146

(9)

Best Practices

155

(1)

Chapter Summary

156

(1)

Review Questions

157

(1)

Hands-on Projects

157

(3)

Case Projects

160

(5)

Database Application Security Models

165

(42)

Introduction

166

(1)

Types of Users

166

(1)

Security Models

167

(2)

Access Matrix Model

167

(1)

Access Modes Model

168

(1)

Application Types

169

(5)

Client/Server Applications

169

(2)

Web Applications

171

(1)

Data Warehouse Applications

172

(1)

Other Applications

173

(1)

Application Security Models

174

(20)

Security Model Based on Database Roles

174

(10)

Security Model Based on Application Roles

184

(3)

Security Model Based on Application Functions

187

(2)

Security Model Based on Application Roles and Functions

189

(2)

Security Model Based on Application Tables

191

(3)

Data Encryption

194

(6)

Chapter Summary

200

(2)

Pharmacy Application

201

(1)

Review Questions

202

(1)

Hands-on Projects

202

(2)

Case Projects

204

(2)

Endnotes

206

(1)

Virtual Private Databases

207

(50)

Introduction

208

(1)

Overview of Virtual Private Databases

208

(2)

Implementing a VPD Using Views

210

(8)

Hiding Rows Based on the Current User

215

(3)

Implementing a VPD Using Application Context in Oracle

218

(7)

Implementing Oracle Virtual Private Databases

225

(15)

Viewing VPD Policies and Application Context Using the Data Dictionary

240

(1)

Viewing VPD Policies and Application Contexts Using Policy Manager

241

(2)

Implementing Row- and Column-level Security with SQL Server

243

(9)

Row-based Security Using Access Levels

243

(3)

Row-based Security Using Application Functions

246

(1)

Column-based Security

246

(6)

Chapter Summary

252

(1)

Review Questions

253

(1)

Hands-on Projects

253

(2)

Case Projects

255

(2)

Part II

Database Auditing Models

257

(26)

Introduction

258

(1)

Auditing Overview

259

(2)

Definitions

259

(1)

Auditing Activities

260

(1)

Auditing Environment

261

(3)

Auditing Process

264

(1)

Auditing Objectives

265

(1)

Auditing Classifications and Types

266

(3)

Audit Classifications

267

(1)

Audit Types

268

(1)

Benefits and Side Effects of Auditing

269

(1)

Auditing Side Effects

269

(1)

Auditing Models

269

(11)

Simple Auditing Model 1

271

(3)

Simple Auditing Model 2

274

(1)

Advanced Auditing Model

275

(2)

Historical Data Model

277

(1)

Auditing Application Actions Model

278

(1)

C2 Security

279

(1)

Chapter Summary

280

(1)

Review Questions

281

(1)

Hands-on Projects

281

(1)

Case Projects

282

(1)

Application Data Auditing

283

(66)

Introduction

284

(1)

DML Action Auditing Architecture

284

(2)

Oracle Triggers

286

(4)

SQL Server Triggers

290

(6)

Creating Triggers

290

(3)

Implementation of an Historical Model with SQL Server

293

(1)

Implementation of Application Actions Model with SQL Server

294

(2)

Fine-grained Auditing (FGA) with Oracle

296

(6)

DML Statement Audit Trail

302

(35)

DML Action Auditing with Oracle

302

(4)

Data Manipulation History

306

(1)

History Auditing Model Implementation Using Oracle

307

(7)

DML Auditing Using Repository with Oracle (Simple 1)

314

(10)

DML Auditing Using Repository with Oracle (Simple 2)

324

(13)

Auditing Application Errors with Oracle

337

(4)

Oracle PL/SQL Procedure Authorization

341

(3)

Chapter Summary

344

(1)

Review Questions

345

(1)

Hands-on Projects

345

(2)

Case Projects

347

(2)

Auditing Database Activities

349

(32)

Introduction

350

(1)

Using Oracle Database Activities

350

(1)

Creating DLL Triggers with Oracle

351

(6)

Example of LOGON and LOGOFF Database Events

352

(3)

Auditing Code with Oracle

355

(2)

Auditing Database Activities with Oracle

357

(11)

Auditing DDL Activities

358

(9)

Oracle Alert Log

367

(1)

Auditing Server Activity with Microsoft SQL Server 2000

368

(1)

Implementing SQL Profiler

368

(1)

Security Auditing with SQL Server

369

(8)

Data Definition Auditing

374

(1)

Database Auditing with SQL Server

375

(1)

Database Errors Auditing with SQL Server

376

(1)

Chapter Summary

377

(1)

Review Questions

378

(1)

Hands-on Projects

378

(2)

Case Project

380

(1)

Endnotes

380

(1)

Part III

Security and Auditing Project Cases

381

(10)

Introduction

382

(1)

Case 1: Developing an Online Database

382

(1)

Case 2: Taking Care of Payroll

383

(3)

Case 3: Tracking Town Contracts

386

(2)

Case 4: Tracking Database Changes

388

(1)

Case 5: Developing a Secured Authorization Repository

389

(2)

Appendix A Database Security Checklist

391

(4)

Appendix B Database Auditing Checklist

395

(4)

Glossary

399

(6)

Bibliography

405

Please wait while the item is added to your bag...

FREE SHIPPING

Amazon no longer offers textbook rentals. We do!

Database Security and Auditing: Protecting Data Integrity and Accessibility

Summary

Table of Contents

Supplemental Materials