05 Database Security - Mind Map

mindmap
  root((Database Security))
    Relational DB
      table, tuple, attribute
      primary key
      foreign key
      view
      SQL
    SQL injection
      tautology
      end-of-line comment
      piggybacked queries
      In-band
      Inferential
      Out-of-band
      countermeasures
        defensive coding
        detection
        runtime prevention
    Access control
      centralized
      ownership-based
      decentralized
      GRANT
      REVOKE
      GRANT OPTION
    Inference
      functional dependencies
      merging views
      design-time fix
      query-time fix
    Encryption
      entire database
      rows or columns
      range query problem
      row blocks + indexes

flowchart LR
  U[User query] --> QP[Client query processor]
  QP -->|transformed query| QE[Server query executor]
  QE --> EDB[(Encrypted database)]
  QE -->|encrypted result| QP
  QP -->|decrypt, discard non-matches| U2[Plaintext result]

Index: 05 Database Security - Index · Cheat sheet: 05 Database Security - Cheat Sheet