第10章DataBase课件.ppt

An Introduction to Database System Chapter 9 Database Security 9.1 Computer Security Instruction 计算机安全性概论 9.2 Database Security Control 数据库安全性控制 9.3 Statistical Database Security 统计数据库安全性 9.4 Oracle’s Security Measures Oracle数据库的安全性措施 9.5 Summary 小结 9.1 Computer Security Instruction计算机安全性概论 9.1.1 3 Types of Security Problems of Computer System 计算机系统的三类安全性问题 9.1.2 Trusted Computer System Evaluation Criteria. 可信计算机系统评测标准 3 Types of Security Problems of Computer System （cont.) 3 Types of Security Problems of Computer System三类计算机系统安全性问题 Technique Security技术安全类 Management Security管理安全类 Policy laws 政策法律类 9.1.2 Trusted Computer System Evaluation Criteria可信计算机系统评测标准 In order to weaken or eliminate the attack to the system, all countries quote or establish a series of security standards. 为降低进而消除对系统的安全攻击，各国引用或制定了一系列安全标准 TCSEC (桔皮书) TDI (紫皮书) Trusted Computer System Evaluation Criteria (Cont.) TCSEC/TDI security levels (安全级别划分) Summary of Trusted Computer System Evaluation Criteria There are a lot of technologies and methods to implement database security, access control and audit are most important. (实现数据库系统安全性的技术和方法有多种，最重要的是存取控制技术和审计技术。) Now, the degrees of many DBMSs are C2, and their security edition is B1. (目前许多大型DBMS 达到了C2级，其安全版本达到了B1) DBMS of C2 must have the functions of discretionary access control and elementary audit. ( C2级的DBMS必须具有自主存取控制功能和初步的审计功能) Summary of Trusted Computer System Evaluation Criteria The system above B2 B2以上的系统 Still in theory research stage 还处于理论研究阶段 Apply to special departments, such as army 应用多限于一些特殊的部门如军队等 The United States is developing the security products, trying to apply the B2 level products to business, and the B2 level gradually becomes the new business standard. 美国正在大力发展安全产品，试图将目前仅限于少数领域应用的B2安全级别下放到商业应用中来，并逐步成为新的商业标准。 9.2 Database Security Control数据库安全性控制 9.2.1 Database Security Control Instruction数据库安全性控制概述 9.2.2 Identification and Authentication用户标识与鉴别 9.2.3 Access Control存取控制 9.2.4 Discretionary Access Control