Inference Detection and Database Security for a Business Environment

Popeea, Traian; Constantinescu, A; Gheorghe, Laura; Țăpuș, Nicolae

doi:10.1109/incos.2012.95

Cited by 5 publications

(5 citation statements)

References 10 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…All users can boundlessly get information from the DB server in an un-secure DB system. All hosts are allowed to associate with the server from any IP address and link with the DB server, making everyone's information accessible in the storage engine [23,24].…”

Section: Secure Databasesmentioning

confidence: 99%

Advancing database security: a comprehensive systematic mapping study of potential challenges

et al. 2023

View full text Add to dashboard Cite

The value of data to a company means that it must be protected. When it comes to safeguarding their local and worldwide databases, businesses face a number of challenges. To systematically review the literature to highlight the difficulties in establishing, implementing, and maintaining secure databases. In order to better understand database system problems, we did a systematic mapping study (SMS). We’ve analyzed 100 research publications from different digital libraries and found 20 issues after adopting inclusion and exclusion criteria. This SMS study aimed to identify the most up-to-date research in database security and the different challenges faced by users/clients using various databases from a software engineering perspective. In total, 20 challenges were identified related to database security. Our results show that “weak authorization system”, “weak access control”, “privacy issues/data leakage”, “lack of NOP security”, and “database attacks” as the most frequently cited critical challenges. Further analyses were performed to show different challenges with respect to different phases of the software development lifecycle, venue of publications, types of database attacks, and active research institutes/universities researching database security. The organizations should implement adequate mitigation strategies to address the identified database challenges. This research will also provide a direction for new research in this area.

show abstract

Section: Secure Databasesmentioning

confidence: 99%

Advancing database security: a comprehensive systematic mapping study of potential challenges

et al. 2023

View full text Add to dashboard Cite

show abstract

“…The inference is used to find information hidden from common users. Popeea T et al [32] presented multi-layer security to database anonymity and database security in a data warehouse which contains information of current and past employees of large companies. They mainly focus on securing communication channel, securing operating system and securing the database.…”

Section: E Inference Controlmentioning

confidence: 99%

Self-Protection against Insider Threats in DBMS through Policies Implementation

Zaman¹,

Raza²,

Malik³

et al. 2017

ijacsa

View full text Add to dashboard Cite

Abstract-In today's world, information security of an organization has become a major challenge as well as a critical business issue. Managing and mitigating these internal or external security related issues, organizations hire highly knowledgeable security expert persons. Insider threats in database management system (DBMS) are inherently a very hard problem to address. Employees within the organization carry out or harm organization data in a professional manner. To protect and monitor organization information from insider user in DBMS, the organization used different techniques, but these techniques are insufficient to secure their data. We offer an autonomous approach to self-protection architecture based on policy implementation in DBMS. This research proposes an autonomic model for protection that will enforce Access Control policies, Database Auditing policies, Encryption policies, user authentication policies, and database configuration setting policies in DBMS. The purpose of these policies to restrict insider user or Database Administrator (DBA) from malicious activities to protect data.

show abstract

“…And since the data is being shared among various server digitally here arises the need of better understanding of sensitive database security, Traian Popeea and their co researchers have stated in their work [1]. The data which we are storing in the database or computer is growing very rapidly and the people who want to access those databases are also growing rapidly therefore the database security has become essential day by day.…”

Section: Literature Reviewmentioning

confidence: 99%

“…Sensitive data in business includes employees personal details such as PAN card number, passport number, bank account, medical records, employee credit card details, identification details of employee etc and most importantly the company details such as financial details, tender details, contract information, configuration of firewalls etc. [1]. Database and the data within them specially is the primary target for most of the intruders.…”

Section: Introductionmentioning

confidence: 99%