Database Administration
and Security
By: Galana Amante & Hawi Mokonen
Ambo University
Overview
Definitions
Importance of Database
Database administrator’s role
Database administration tools and strategies
Security
Security policies and vulnerabilities
Database Administration and Security 12/28/2020 2
Definition of terms
Data
raw facts from which information is produced
A valuable resource that can translate into information
Database
Collection of related and well organized data
Repository of data, designed to support efficient data
storage, retrieval and maintenance
Administration
The act of managing duties, responsibilities, or rules.
Database Administration and Security 12/28/2020 3
Definitions of terms…..
Administrator: is a person who ensures that an
organization operates efficiently.
Data Administration:
A high-level function that is responsible for the overall
management of data resources in an organization,
including maintaining corporate-wide definitions and
standards
Database Administration:
A technical function that is responsible for physical database design
and for dealing with technical issues such as security enforcement,
database performance, and backup and recovery
Database Administration and Security 12/28/2020 4
Definition of terms…
Database Administration and Security 12/28/2020 5
Importance of Database
Interpretation and presentation of data in useful
format by transforming raw data into information
Distribution of data and information to the right
people at the right time
Data preservation and monitoring the data usage for
adequate period of time
Control over data duplication and use, both internally
and externally
Database Administration and Security 12/28/2020 6
Database Administrator’s Role
Managerial roles
Establishing policies, procedure and standards
Ensuring data privacy and security
Interacts with end user by providing data and information
Coordinating, monitoring, allocating resources(people,
data)
Database Administration and Security 12/28/2020 7
Database Administrator’s Role
Technical Roles
Selection of hardware and software
Installing/upgrading DBMS
Tuning database performance
Managing data security, privacy, and integrity
Data backup and recovery
Database Administration and Security 12/28/2020 8
Database Administration tools and strategies
Data Dictionary-two main types of data dictionaries
exist
Integrated-included with the DBMS.
Standalone-used independently parallel with DBMS
Data dictionaries can also be classified as active or
passive
Active-automatically updated by the DBMS with every database
access, thereby keeping its access information up to date
Passive-is not updated automatically and usually requires
running a batch process
Database Administration and Security 12/28/2020 9
Database Administration tools and strategies
CASE(Computer Aided System Engineering)
Provides an automated framework for the Systems
Development Life Cycle (SDLC)
Uses structured methodologies and powerful graphical
interfaces
Classified as front-end and back-end CASE tools
according to the extent of support they provide
Database Administration and Security 12/28/2020 10
Database Administration tools and strategies
Strategy-describes how the ends (goals) will be
achieved by the means (resources).
Database administration strategy must not
conflict with the IS plan
Most commonly used methodology is known as
information engineering (IE)
Database Administration and Security 12/28/2020 11
Security
Protection of the data against accidental or
intentional loss, destruction, or misuse
Activities and measures to ensure the
confidentiality, integrity, and availability of an
information system and its main asset, data.
In general, Securing data entails securing overall
information system architecture
Database Administration and Security 12/28/2020 12
Security…..
Confidentiality
• deals with ensuring that data is protected against unauthorized access
• entails safeguarding data against disclosure of any information that
would violate the privacy rights of a person or organization.
Integrity
• is concerned with keeping data consistent, free of errors, or
anomalies.
• focuses on maintaining the data free of inconsistencies and anomalies
Database Administration and Security 12/28/2020 13
Security……
Availability
• accessibility of data when ever by authorized users for
authorized purposes
• System availability is an important goal of security
• It is insured by protecting entire system(not only data
component) from service degradation or interruption caused
by any source.
Database Administration and Security 12/28/2020 14
Security policy & Vulnerabilities
A security policy is a collection of standards, policies, and
procedures created to guarantee the security of a system
A security vulnerability is a weakness in a system
component that could be exploited to allow unauthorized
access or cause service disruptions.
Some types: technical, managerial, cultural, procedural, and so
on
Database Administration and Security 12/28/2020 15
Summary
Data is raw resources that information produced from
Information is a processed data
Database is collection of related and well organized
data
DA- A high-level function that is responsible for the
overall management of data resources
Database Administration and Security 12/28/2020 16
Summary…..
DBA- A technical function that is responsible for physical
database
Security is protection of the data against accidental or
intentional loss, destruction, or misuse
Security refers to activities and measures to ensure the
confidentiality, integrity, and availability of an information
system and its main asset, data.
Database Administration and Security 12/28/2020 17
Security…
Generally speaking, in database security:
Data are Protected, Reconstructable, Auditable,
Tamperproof
Users are Identifiable, Authorized, Monitored
Database Administration and Security 12/28/2020 18
Reference
Database Systems: Design, Implementation,
and Management, Ninth Edition Carlos
Coronel, Steven Morris, and Peter Rob
Database Administration and Security 12/28/2020 19
Thank you
Database Administration and Security 12/28/2020 20
