P1L7 Database Security

Question 1

Importance of DB security

Answer 1

• -Databases store massive amounts of sensitive data
• -Data has structure that influences how it is accessed
• -Accessed via queries or programs written in languages like SQL
• -Transactional nature of queries (done completely or not done at all)
• -Derived data or database views

Question 2

Who are the biggest threats to DB?

Answer 2

Insiders and unauthorized users

Question 3

Databases are attractive to users because

Answer 3

• -they store info that is easily monetized
• -they store info about a lot of users
• -query languages used to access data can be abused

Question 4

Relational Databases

Answer 4

–Consists of relations or tables

Question 5

RDBS table

Answer 5

A table is defined by a schema and consists of tuples

Question 6

Tuples

Answer 6

Store attribute values as defined by schema

Question 7

Keys

Answer 7

Used to access data in tuples

Question 8

Primary Key

Answer 8

A unique key for each tuple in the table

Question 9

Foreign Key

Answer 9

A primary key from another table

Question 10

T/F: A database view enhances data security.

Answer 10

True. It can exclude sensitive attributes that should not be accessible to certain users

Question 11

DB Access Control

Answer 11

GRANT or REVOKE

Question 12

Privileges

Answer 12

SELECT, INSERT, UPDATE, or DELETE

Question 13

SQL injections

Answer 13

Malicious SQL commands sent to a database

Question 14

SQL Injection Defenses

Answer 14

–Input checking (all input is evil)
Top 10 Defenses
1. Parameterize Queries
2. Encode data
3. Validate all inputs
4. Implement appropriate access controls
5. Establish identity and authentication controls
6. Protect Data and Privacy
7. Implement logging, error handling, and intrusion detection
8. Leverage security features of frameworks and security libraries
9. Include security­specific requirements
10. Design and architect security libraries

Question 15

Inference attacks

Answer 15

Using the data to make an inference about the results returned. Sometimes requires additional outside info.

Question 16

Defenses against inference attacks

Answer 16

• -Do not allow aggregate query results when the set of tuples selected is either too small or too large (Perturbation)
• -De-identification: transform data by removing identifying info.
• -Anonymization: replace exact values with a more general values