This Lecture makes reference to

Data Dictionary (data directory or system catalog)

• Contains metadata

• Consist of views of system tables
  • Static data dictionary views - change only when a change is made to dictionary i.e. the metadata changes
  • Dynamic performance views - relate to performance continuously updated i.e. how much RAM is being used?

DBA - Database Admin

Note: can access tables relating to this via

Controls:

• Creating and configuring an Oracle database (Control files, redo logs, table spaces, data files, temp files, undo files)

• Managing Memory Requirements

• Managing Users and Securing the Database

• Managing backup

Security

Threats

• Theft and fraud

• Loss of confidentiality, privacy, integrity, availability

Countermeasures

Levels of Security

Physical - Protection of equipment from theft, erasure, physical damage, network eavesdropping.

Human Level Security - stolen passwords, sabotage (e.g. alterations to make programs insecure such as trapdoors)

Operating System Level Security - invalid logins (i.e. OS access controls), File-level access, improper use of “superuser” authority or privileged machine instructions

Database Users

1. Users must have an account on the database, with defined user privileges (Authorise database user)

2. This user then must have access to the database, their account becomes a access id (Authentication)... audit trails used to look for tampering

3. An audit trail to determine where all commands where made, this can help mitigate tampering

USER LEVELS - controlled by admin

System level - modify anything

Object level - modify only specific tables or views, Note if you make a table you become the owner of that table and have access rights to it