Database Management Systems (2020)

The intent of the Database Management Systems Knowledge Unit is to provide students with the skills to utilize database management system to solve specific problems.

Outcomes

After completing the KU, students will be able to:

1. Describe the role of a database, a database management system (DBMS), and a database server within a complex system supporting one or more applications.
2. Outline different types of databases and cases where they may be used.
3. Identify and describe common security concerns in databases and database management systems.
4. Apply SQL to create and administer databases and to manipulate the data they contain.
5. Describe DBMS access controls, privilege levels, and security principles and apply them to a simple database.

Topics

1. SQL Database Administration
   • User creation/deletion, permissions and access controls)
2. Database concepts
   • Indexing, Inference, Aggregation, Polyinstantiation
3. Database Security
   • How to protect data (confidentiality, integrity and availability in a DBMS context)
   • Vulnerabilities (e.g., SQL injection)
4. Overview of database security models and concerns, such as:
   • Inference
   • Aggregation
   • Injection
   • Hashing and encryption
   • Data corruption
   • Unauthorized access
   • Database access controls (DAC, MAC, RBAC, Clark-Wilson)

Skills

MySQL, PostgreSQL, Microsoft SQL Server, Microsoft SQL Server Management Studio, Oracle Database

NICE Framework Categories

Securely Provision (SP)

Operate and Maintain (OM)

Oversee and Govern (OV)

Protect and Defend (PR)

CSEC 2017 Categories

Data Security	Software Security
System Security	Organizational Security

Specialization Areas

• Data Management Systems Security
• Health Care Security

See also

Related Knowledge Units

• Databases
• Data Administration

Original Knowledge Unit

• Database Management Systems (2014)

Further reading

Suggested textbooks

• Basta, A., Zgola, M. “Database Security”, Centage Learning. 2012.

Reference ID

DMS