Question

Suppose a public sector university in Saudi Arabia wants to implement the strictest access control to its databases. Instead of allowing each user to control access to their own data, the university wants system resources to be controlled by the operating system under system administrator with an hierarchical approach of assigning security labels to the resource objects.

Answer the following questions;

1. Which database security mechanism would you recommend to the university?
2. Motivate your recommendation by describing two advantages.
3. What are the two disadvantages of using this approach?

Answer 1

a.I recommend Access Control database Security Mechanism.

Which identifies valid users who may have any access to the valid data in the Database and which may restrict the operations that the user may perform.

Each applications is associated with a specified role.each role has a list of authorized users who may execute or design or administers the application.

b. 1.it helps to increase data security and confidentiality in an organisation.

2.It reduces administrative work needed to monitor unauthorized access to important files.

3. Access rights and protocols are easy to implement by the system administration.

c. Communication across different departments tends to be less effective than in flat organisation. Rivalry between departments may inflame as each department makes decisions that benefit it's own interests rather than organisation's as a whole.