Editorial & Advisory Board - Acta Technica Corviniensis

Another technique based on access control
mechanism is proposed by [19]. The authors in [19] use
authorization views that enable transparent querying
which are validated only when the information is
present in the authorization views otherwise they are
not. The benefit provided by this approach is that only
the information and rules present in the authorization
views are accepted and only then the access is granted
otherwise the access is denied to the database.
TABLE 1 below lists a brief overview of the security
techniques along with their description.
CONCLUSIONS
In this paper we talked about various security
vulnerabilities that the database suffers from and the
need for security to alleviate these vulnerabilities. We
also presented some common security techniques that
can be employed to augment and enhance the security
of the database against some known attacks and
security threats.
In Section 1 we provided an introduction about the
database and the security threats and need for
security in the database. In the next section we
discussed various security techniques that may be
implemented in the database. A Comparative Analysis
of the techniques discussed in Section 2 is presented in
Section 3.
REFERENCES
[1] Samba Sesay, Zongkai Yang, Jingwen Chen, Du Xu, “A
Secure Database Encryption Scheme”, Second IEEE
Consumer Communications and Networking
Conference (CCNC), 3‐6 Jan. 2005, pp. 49‐ 53.
[2] Srikanth Chava, “A Security Protocol for Multi‐User
Authentication”, arXiv: 0804.1970v1 [cs.CR].
[3] Lianzhong Liu and Jingfen Gai, “A New Lightweight
Database Encryption Scheme Transparent to
Applications”, 6th IEEE International Conference on
Industrial Informatics, 13‐16 July 2008, pp.135‐140.
[4] E. Anupriya, Sachin Soni, Amit Agnihotri, Sourabh
Babelay, “Encryption using XOR based Extended Key
for Information Security – A Novel Approach”,
International Journal on Computer Science and
Engineering (IJCSE), vol. 3, issue 1, Jan. 2011, pp. 146‐
154.
[5] Hasan Kadhem, Toshiyuki Amagasa, Hiroyuki
Kitagawa, “A Novel Framework for Database Security
based on Mixed Cryptography”, Fourth International
Conference on Internet and Web Applications and
Services, 24‐28 May 2009, pp.163‐170.
[6] Soumyendu Das, Subhendu Das, Bijoy Bandyopadhyay,
Sugata Sanyal, “Steganography and Steganalysis:
Different Approaches”, International Journal of
Computers, Information Technology and Engineering
(IJCITAE), Vol. 2, No 1, June, 2008, Serial Publications,
pp. 1‐11.
[7] M. Naseem, Ibrahim M. Hussain, M. Kamran Khan,
Aisha Ajmal, “An Optimum Modified Bit Plane Splicing
LSB Algorithm for Secret Data Hiding”, International
Journal of Computer Applications, Vol. 29, No. 12, 2011.
Foundation of Computer Science, New York, USA, pp.
36‐43.
[8] Wen‐Chung Kuo, Dong‐Jin Jiang, Yu‐Chih Huang, “A
Reversible Data Hiding Scheme Based on Block
Division”, Congress on Image and Signal Processing,
Vol. 1, 27‐30 May 2008, pp. 365‐369.
ACTA TECHNICA CORVINIENSIS – Bulletin of Engineering
[9] Yih‐Chuan Lin, Tzung‐Shian Li, Yao‐Tang Chang, Chuen‐
Ching Wang, Wen‐Tzu Chen, “A Subsampling and
Interpolation Technique for Reversible Histogram Shift
Data Hiding”, Image and Signal Processing,Lecture
Notes in Computer Science, vol. 6134, 2010, Publisher:
Springer Berlin/Heidelberg, pp. 384‐393.
[10] Chyuan‐Huei Thomas Yang, Chun‐Hao Hsu, “A High
Quality Reversible Data Hiding Method Using
Interpolation Technique," IEEE Fifth International
Conference on Information Assurance and Security,
vol. 2, 18‐20 Aug. 2009, pp. 603‐606.
[11] Che‐Wei Lee and Wen‐Hsiang Tsai, “A Lossless Data
Hiding Method by Histogram Shifting Based on an
Adaptive Block Division Scheme”, Pattern Recognition
and Machine Vision, River Publishers, Aalborg,
Denmark, pp. 1–14.
[12] Sandipan Dey, Ajith Abraham, Sugata Sanyal, “An LSB
Data Hiding Technique Using Prime Numbers”,
IEEEThird International Symposium on Information
Assurance and Security,Manchester, United Kingdom,
IEEE Computer Society press, USA, 29‐31 Aug. 2007,
pp.101‐106.
[13] Sandipan Dey, Ajith Abraham, Bijoy Bandyopadhyay
and Sugata Sanyal, "Data Hiding Techniques Using
Prime and Natural Numbers" Journal of Digital
Information Management, vol. 6, no. 3, 2008, pp. 463‐
485.
[14] Sandipan Dey, Ajith Abraham and Sugata Sanyal "An
LSB Data Hiding Technique Using Natural Numbers",
IEEE Third International Conference on Intelligent
Information Hiding and Multimedia Signal Processing
(IIHMSP), vol. 2, Nov 26‐28 2007, pp. 473‐476.
[15] Elisa Bertino, Moustafa A. Hammad, Walid G. Aref,
Ahmed K. Elmagarmid, “An Access Control Model for
Video Database Systems”, Proceedings of the ninth
international conference on Information and
knowledge management, 2000,pp. 336 – 343.
[16] Naren Kodali, Csilla Farkas, Duminda Wijesekera, “An
authorization model for multimedia digital libraries”,
International Journal on Digital Libraries, vol. 4, no. 3,
2004, pp. 139‐155.
[17] Béchara Al Bouna, Richard Chbeir, “Multimedia‐based
authorization and access control policy specification”,
Proceedings of the 3rd ACM workshop on Secure Web
Services, 2006,pp. 61–68.
[18] Shermann S.M. Chan, Qing Li, José A. Pino, “Access
Control Mechanism for Collaborative Video Database
Production Applications”, Proceedings of IEEE Sixth
International Symposium onMultimedia Software
Engineering, 13‐15 Dec. 2004, pp. 396‐ 402.
[19] S Rizvi, A Mendelzon, S Sudarshan, Prasan Roy,
“Extending query rewriting techniques for finegrained
access control”, Proceedings of the ACM
SIGMOD international conference on Management of
data, 2004, pp. 551 – 562.
[20] Q Wang, T Yu, N Li, J Lobo, E Bertino, “On the
Correctness Criteria of Fine Grained Access Control in
Relational Databases”, Proceedings of the 33rd
international conference on Very large data
bases,2007,pp. 555‐566.
[21] S Chaudhuri, T Dutta, S. Sudarshan, “Fine Grained
Authorization Through Predicated Grants”, IEEE 23rd
International Conference onData Engineering, 15‐20
April 2007, pp.1174‐1183.
[22] Hong Zhu and Kevin Lü, “Fine‐Grained Access Control
for Database Management Systems”, Data
Management. Data, Data Everywhere, vol. 4587,2007,
pp. 215‐223.
[23] Zheng Zhang and Alberto O. Mendelzon,
“Authorization Views and Conditional Query
Containment”,International Conference on Database
Theory, vol. 3363, 2005, pp. 259‐273.
138
2012. Fascicule 2 [April–June]