1. Copyright © 2004 Pearson Education, Inc.

2. Chapter 23 Database Security and Authorization

3. Elmasri and Navathe, Fundamentals of Database Systems, Fourth Edition Copyright © 2004 Pearson Education, Inc. Slide 23-3 Introduction to Database Security Issues Types of Security Database Security and the DBA Access Protection, User Accounts, and Database Audits

4. Elmasri and Navathe, Fundamentals of Database Systems, Fourth Edition Copyright © 2004 Pearson Education, Inc. Slide 23-4 Discretionary Access Control Based on Granting and Revoking Privileges Types of Discretionary Privileges Specifying Privileges Using Views Revoking Privileges Propogation of Privileges Using the GRANT OPTION An Example Specifying Limits on Propagation of Privileges

5. Elmasri and Navathe, Fundamentals of Database Systems, Fourth Edition Copyright © 2004 Pearson Education, Inc. Slide 23-5 Mandatory Access Control and Role-Based Access Control for Multilevel Security Comparing Discretionary Access Control and Mandatory Access Control Role-Based Access Control Access Control Policies for E-Commerce and the Web

6. Elmasri and Navathe, Fundamentals of Database Systems, Fourth Edition Copyright © 2004 Pearson Education, Inc. Slide 23-6 Introduction to Statistical Database Security

7. Elmasri and Navathe, Fundamentals of Database Systems, Fourth Edition Copyright © 2004 Pearson Education, Inc. Slide 23-7 Introduction to Flow Control Covert Channels

8. Elmasri and Navathe, Fundamentals of Database Systems, Fourth Edition Copyright © 2004 Pearson Education, Inc. Slide 23-8 Encryption and Public Key Infrastructures The Data and Advanced Encryption Standards Public Key Encryption Digital Signatures

9. Elmasri and Navathe, Fundamentals of Database Systems, Fourth Edition Copyright © 2004 Pearson Education, Inc. Slide 23-9 Summary