数据库设计chap05.ppt

? Pearson Education Limited, 2004 Chapter 5 Database Administration and Security Transparencies Chapter 5 - Objectives The distinction between data administration and database administration. The purpose and tasks associated with data administration and database administration. The scope of database security. Chapter 5 - Objectives Why database security is a serious concern for an organization. The type of threats that can affect a database system. How to protect a computer system using computer-based controls. Data administration and database administration Data Administrator (DA) and Database Administrator (DBA) are responsible for managing and controlling activities associated with corporate data and corporate database, respectively. DA is more concerned with early stages of lifecycle and DBA is more concerned with later stages. Data administration Management and control of corporate data, including: database planning development and maintenance of standards, policies, and procedures conceptual and logical database design Data administration tasks Database administration Management and control of physical realization of a database system, including: physical database design and implementation setting security and integrity controls monitoring system performance reorganizing the database Database administration tasks Comparison of data and database administration Database security Mechanisms that protect the database against intentional or accidental threats. Not only apply to the data held in a database. Breaches of security may affect other parts of the system, which may in turn affect the database. Database security Includes hardware, software, people, and data. Growing importance of security is the increasing amounts of crucial corporate data being stored on computer. Database security Outcomes to avoid: theft and fraud loss of confidentiality (secrecy) loss of privacy loss of integrity loss of availability Database security Threat A