Critical Assessment of Auditing Contributions to Effective and Efficient Security in Database Systems

Abstract

Database auditing has become a very crucial aspect of security as organisations increase their adoption of database management systems (DBMS) as major asset that keeps, maintain and monitor sensitive information. Database auditing is the group of activities involved in observing a set of stored data in order to be aware of the actions of users. The work presented here outlines the main auditing techniques and methods. Some architectural based auditing systems were also considered to assess the contribution of auditing to database security. Here a framework of several stages to be used in the instigation of auditing is proposed. Some issues relating to handling of audit trails are also discussed in this paper. This paper also itemizes some of the key important impacts of the concept to security and how compliance with government policies and regulations is enforced through auditing. Once the framework is adopted, it will provide support to database auditors and DBAs.

Self-Protection against Insider Threats in DBMS through Policies Implementation

“…Olumuyiwa O. Matthew et al [24] discussed several already existing database auditing techniques such as statement auditing, privilege auditing, schema object auditing and fine-grained auditing etc. at various database environments.…”

“…Insider Attack DATA-CENTRIC APPROACH Performance consideration [24] Outlines main auditing techniques and methods Issues relating to handling of audit trail are also discussed and key important impacts of security are also highlighted In our survey adversary can be internal users or database administrator. He or she can perform the following actions to attack the database.…”

“…Fig 1 shows some critical areas need to be considered in Database Security [5] and how different researcher use different techniques and methods to mitigate these risks. www.ijacsa.thesai.org Used for both insider and outsider attacks [20] Auditing Method Used for both insider and outsider attacks [24,27] Hackers exploit these critical areas and security holes in a database application to gain database administrator (DBA) level grants and privileges to access sensitive data and cause a denial of service (DOS) attacks. Following are the security threats that need attention [10].…”