Traditional database administrator (DBA) privileges are too high, which causes insider security threat problem. To solve this problem, an extended Role Based Access Control (RBAC) rights management model for DBA was brought out in this paper. Combined with the principle of least privilege security, this paper proposes a scheme which contains three management roles separation and dynamic constraints. It solved the problem that system administrator's privileges are too high and avoided the insider threats. Practice proves that this model has versatility, flexibility, and high security.
목차
Abstract 1. Introduction 2. Relate Research 2.1. Problems of DBA Role 2.2. RBAC Model 2.3. Least Priviledge 3. The Extended RBAC Model For DBA 4. The Design of GF-RBAC Model For DBA 4.1. A Method to Separate Privileges of DBA into Groups 4.2. Database Operations Classification 4.3. System Privileges Classification 4.4. Access Privilege of Database Resource 4.5. Factor Constraints 6. Type-style and Fonts 7. Footnotes Acknowledgements References
키워드
RBACDBAinner security threatleast privilege
저자
Mou Shen [ Beijing Key Laboratory of Network Technology School of Computer Science and Engineering Beihang University, Beijing, 100191 China ]
Mengdong Chen [ Beijing Key Laboratory of Network Technology School of Computer Science and Engineering Beihang University, Beijing, 100191 China ]
Min Li [ Beijing Key Laboratory of Network Technology School of Computer Science and Engineering Beihang University, Beijing, 100191 China ]
Lianzhong Liu [ Beijing Key Laboratory of Network Technology School of Computer Science and Engineering Beihang University, Beijing, 100191 China ]
보안공학연구지원센터(IJDTA) [Science & Engineering Research Support Center, Republic of Korea(IJDTA)]
설립연도
2006
분야
공학>컴퓨터학
소개
1. 보안공학에 대한 각종 조사 및 연구
2. 보안공학에 대한 응용기술 연구 및 발표
3. 보안공학에 관한 각종 학술 발표회 및 전시회 개최
4. 보안공학 기술의 상호 협조 및 정보교환
5. 보안공학에 관한 표준화 사업 및 규격의 제정
6. 보안공학에 관한 산학연 협동의 증진
7. 국제적 학술 교류 및 기술 협력
8. 보안공학에 관한 논문지 발간
9. 기타 본 회 목적 달성에 필요한 사업
간행물
간행물명
International Journal of Database Theory and Application
간기
격월간
pISSN
2005-4270
수록기간
2008~2016
십진분류
KDC 505DDC 605
이 권호 내 다른 논문 / International Journal of Database Theory and Application Vol.6 No.6