Looking for an article on database security

I'm looking for an article on database design with reference to security; meaning, how to create users, users types, groups etc.
Does anyone know something worth reading?
xww

http://databases.about.com/od/security/

Similar Messages

  • Looking for an XML-enabled database system

    Dear all,
    I am looking for a RDBMS (Relational Database Management System) that provides management of XML data in a relational fashion.
    I found the IBM DB 2 XML Extender. However, I am not sure if this system is already in use (because the latest release was in 2003).
    I would be very grateful to you if you could help me to find what I am looking for.
    PS. For RDBMS handling XML data, we find two categories: XML-enabled systems (they store XML data using a special data type like BLOB, CLOB,...), or the native XML systems (which stor XML data in its hierarchical structure, so the fundamental unit of storage is XML document). So, I precise that I am looking for an XML-enabled system and NOT a native XML system.
    Thanks in advance.
    Best regards,

    Thanks for your help,
    To be more clear, I am looking for an XML-enabled database system (which provides only relational techniques to manage XML data).
    Oracle is a Hybrid system (it means that it provides both native and relational fashions to manage XML data, e.g. you can store XML document as XMLType column (native way) or using BLOB data type (relational data type). I am collecting information about the three broad categories of XML database systems (native, XML-enabled, and Hybrid), and I would like to give example of each system. For example, there is BaseX and eXist-db for the first category (native systems), Oracle and IBM DB2 for the third category (each of theme manage XML data in both native and relational fashions). However, for the second category (XML-enabled systems), I don't find more information about the existing systems, there is for instance postgreSQL which is an XML-enabled system, but I don't find more information about its architecture, its XML data storage model, API for querying and updating, and so on.
    Please don't hesitate to help me if you get some documentation about postgreSQL or about another XML-enabled database system.
    Thank you again.
    Best regards.

  • Looking for a flat file database

    Hi,
    I am looking for a 'database' for my Java-Project. My requirements are: no ODBC, no DB-Server, all Windows Systems.
    I think my only option is a flat file based system. So my Question:
    Which database do you know, or do you advice an other solution for my problem.
    Thanks for your answers

    Why don't you go to the two sites above and look through their documentation?
    Edit: And why did you resurrect a four year dead thread for this?

  • Looking for OTN Article re DB triggers

    Hello,
    I was wondering if someone can point me to the correct location.
    I am looking for an artice that has appeared on OTN that described how to implement certain functionality within database triggers.
    Specifically it covered such things as if a parent record was updated and you wanted a child/children records to be updated at the same time, it described how this could be done using SQL/PL-SQL code.
    Can anyone help? I think it has appeared within the last year.
    regards,
    Mohan

    Avi Miller wrote:
    Dude wrote:
    And as previously mentioned, a snapshot requires all parent snapshots to be useful for data recovery. What? btrfs snapshots are independent -- they do not require parent snapshots for recovery. In fact, once a snapshot has been taken, it's literally indistinguishable from the original. You can remove/change/burn with fire the original and the snapshot will continue to operate. That's the whole point of snapshots. :)Doesn't BTRFS use copy-on-write technology? As far as I understand, creating a snapshot does not involve any copying of data and as such is similar to a restore point marker. When mounting a snapshot or subvolume, any file system changes are recorded in metadata, which contains information about what data blocks were changed and the differential data itself. Snapshot and subvolumes are independent files systems and have their own copy of a B-tree. When modifying data, such actions are again recorded and affect only the currently mounted volume. But unless data was modified, there is still only one copy of a data block on disk and hence the snapshot won't help if such data is lost due to a bad disk block or disk error.
    SAN and virtualization products use similar snapshot technologies. As far as I'm aware, this is great for undoing data changes by deleting snapshots or mounting different versions of subvolumes, but its not a solution for full data recovery and not a suitable solution to recover Oracle databases.
    Is this incorrect, please let me know where I'm mistaken. Thanks!

  • Looking for Good Article/Explanation on Timezones

    Hi,
    I'm looking for answers about timezones and if anyone could point me to a really good artilce I'd appreciate it. Here's the type of thing I'm looking for...
    I'm writing an application that creates records in a file. The records are timestamped as to their creation. The catch is that the timestamp may not be the default timezone depending on the user's preference. I know the user's UTC offset and whether they use daylight saving time. The problem comes in when trying to figure out which timezone id to use to create the new timezone and set it in the calendar object. For example, if I know that the GMT offset is -7*60*60*1000, I get back 7 possible ids. I don't know anything about the rules for daylight saving time for the user, only if they use it or not. How do I know which id to choose? The users can be from anywhere in the world.
    Thanks for any help.

    Yes, I'd thought about just having the user set their
    timezone (similar to the forum Settings). However,
    even this forum settings causes some confusion.
    There's two options for a number of timezones. What
    differentiates them? The daylight saving rules are
    important to know and the list of timezones doesn't
    indicate this in any way. This list doesn't show all
    available timezones either (as previously mentionted,
    there's seven timezones for GMT -0700).Then you would have to do a better job than Sun did, wouldn't you? After all if you are going to be interpreting the answer you get, you had better ask a clear question. If you want to know the list of timezones actually supported by Java, then examine the source code for the TimeZone class. You can also search Google for "time zones" for links that will keep you busy for weeks learning the arcana of time zones around the world.

  • Looking for addition articles for the Arch Linux Press Review wikipage

    Good day all,
    I recently updated the Arch Linux Press Review wikipage, found here:
    http://wiki.archlinux.org/index.php/Arc … ess_Review
    If you know of any additional reviews or articles about Arch Linux, please edit the wiki page or post the info as a reply.
    Any contributions for non-English language articles, or corrections in that area, would be especially appreciated.
    Thank you,
    Luke Seubert

    tlaloc wrote:
    We have a collection of German reports over here:
    http://wiki.archlinux.de/title/Arch_in_den_Medien
    Thanks tlaloc! I transferred that list of articles over to the Arch Press Review wikipage under the German Language section, and included a link back to the German original. I also fixed a tiny spelling error in the German page. I also doublechecked all the links to make sure they are live. As the French would day, "J'encule les moustiques"
    tlaloc wrote:
    No damage done - just go on.
    We are all behind you (eight miles behind you, so if you get in trouble ....)
    But that's fine by me, just go on.
    So nice to know you have my back tlaloc
    Last edited by lseubert (2009-05-22 14:35:31)

  • Looking for upgrade articles on the G4 and Intel Minis?

    I wrote a couple of upgrade guides, one for upgrading the G4 Mini and one for upgrading the Intel Mini. The G4 Mini upgrade guide is available here:
    http://mini.wiredby.com
    And the Intel Mini upgrade guide is here:
    http://www.mac-forums.com/forums/showthread.php?t=31816
    Good luck in all your mods!

    Intresting thing:
    If you type "isub" into the spotlight search, it will send you to the sound control panel.
    If you are searching in the Mac Help, it will give you an instruction how to fix your problems (but of course can´t work it out). Very strange!

  • Looking for a specific App. - Security related.

    I saw a man using his iPhone on the subway today, using an application that changed his passcode unlocking screen into a series of dots (3x3) that he had to slide a line into, creating a pattern. I'd seen this feature on other phones, but never knew it could come to the iPhone.
    Anyone have an idea of what this App is? Or was it an obscure Apple feature I have yet to find?
    Many thanks to any help.

    Most likely a jailbroken iPhone as the legitimate SDK doesn't allow integration into the iPhone at that level to change things.

  • Looking for a an article

    Dear All
    I am new to fieldpoint and i am looking for this article its not available can anyone help
    Building Intelligent Ethernet-Based Distributed I/O Systems with National Instruments LabVIEW
    Regards
    Pooja Malhotra

    Hi,
    Thank you for your patience.  This developer zone article is now back on the web: Building Intelligent Ethernet-Based Distributed I/O Systems with National Instruments LabVIEW.
    Regards,
    Hal L.

  • Looking for a better solution that tunnel interface

    Hi
    acctualy I have a Vsat connection between my remote site and central office
    on both site we have router and sat modem
    I have now a tunnel interface between my two routers,I am looking for a better idea,,

    hi...
    so you have tunnel interface between your two router so now what are you looking for...?
    secure IPsec connection or what???
    please explaine in details
    regards
    Devang

  • Why is the Microsoft Office Access Database Engine data source looking for a workgroup information file?

    While trying to import to MSSQL2012 from SSDT using the wizard from an Access 2013 DB (.accdb) which is password protected, I get the following error with the username blank and the password field correctly populated: 
    Cannot start your application. The workgroup information file is missing or opened exclusively by another user. (MicrosoftOffice Access Database Engine)
    But according to this link:
    http://office.microsoft.com/en-us/access-help/what-happened-to-user-level-security-HA010342116.aspx
    MSA10 and beyond shouldn't need workgroup information files, although it's not clear to me if they are
    created/used or not.
    I can point the wizard to some local version of system.mdw at Advanced -> All -> Jet OLEDB:System Database, and then the error becomes:
    Not a valid account name or password. (Microsoft Office Access Database Engine)
    for any username I can think of.
    Questions:
    1.  Why does this data source insist on looking for a workgroup information file even though user-level security should be disabled?
    2.  Why does the Open dialog box for the Microsoft Access Database Engine have *.mdb as the only selectable filetype?
    3.  How can I get around these errors for an .accdb that is password protected?
    Thanks!

    Hi JordanPG,
    To connect to Access 2007 or later database, we need the Microsoft ACE 12.0 OLE DB driver. SQL Server only installs the Microsoft Jet 4.0 OLE DB driver which can be used to connect to Access 2003 or earlier database. Besides, the Microsoft Jet 4.0 OLE DB
    driver only has 32-bit version, but the Microsoft ACE 12.0 OLE DB driver has both 32-bit and 64-bit version. However, the 32-bit and 64-bit Microsoft ACE 12.0 OLE DB drivers cannot be installed on a single server.
    According to your description, you can use the 64-bit SQL Server Import and Export Wizard to load data from the Access database, so the 64-bit Microsoft ACE 12.0 OLE DB driver is installed on your computer. Since the BIDS/SSDT is a 32-bit application, the
    64-bit Microsoft ACE 12.0 OLE DB Provider is not visible in BIDS/SSDT. So, when you said that you select “Microsoft Access (Microsoft Access Database Engine)" in the SQL Server Import and Export Wizard (it is actually the 32-bit version) started by the SSDT,
    I think it should be “Microsoft Access (Microsoft Jet Database Engine)”. Because the Microsoft Jet 4.0 OLE DB driver only supports Access 2003 or earlier format, it threw the error “Test connection failed because of an error in initializing provider. Unrecognized
    database format 'C:\myDB.accdb'”.
    In this situation, you have two approaches to avoid this issue:
    Launch the SQL Server Import and Export Wizard (64-bit), and select “Save SSIS Package” to “File System” on the “Save and Run Package” page. Then, the package will be saved to a specified directory. After that, you can add this existing package to a SSIS
    project. The status of the corresponding OLE DB Connection Manager should be Work Offline, or the OLE DB Source will throw an error about 32-bit driver if the Connection Manager is not in Work Offline status, you can ignore that and the package can run successfully
    in SSDT as long as the project is set to run in 64-bit runtime mode.
    However, for the SSDT 2012 integrated with Visual Studio 2012, the 64-bit runtime mode is disabled. In this situation, to run the package in SSDT, you have to uninstall the 64-bit Microsoft ACE 12.0 OLE DB drivers and install the 32-bit one. Here is the
    download link:
    http://www.microsoft.com/en-in/download/details.aspx?id=13255 
    Regards,
    Mike Yin
    TechNet Community Support

  • Looking for a solution or service to export data from a dynamic form into a database

    As the title of this discussion states, I'm looking for a solution or service to export data from a dynamic form into a database to be used for reporting. Creating the dynamic form is not a problem, it's getting it into a database that's more of a nuisance. A dynamic form is needed in order to provide skip logic, hide/reveal, and other similar dynamic features.
    The database hasn't been created, so just looking for the easiest, more effective and dependable solution. The key is being able to run reports off the data later.

    So i set up 2 residential grade routers to test this out. Seems to be working okayish. I believe with directional antenae routers I should achieve what I need.
    As for security I configured each device separately. I set them so only allow the MAC address of the other through wireless. This seems to be the best system for me. Once they are connected even if a MAC is spoofed of the other router it drops automatically because they are always connected. My wired devices get plugged in and recieve an IP from my main network.
    There more testing to be done, but it seems to be working.
    Thanks for your input and suggestions guys. I will be marking this topic as answered.

  • Looking for Security Best Practices documentation for Sybase ASE 15.x

    Hello, I'm looking for SAP/Sybase best practice documentation speaking to security configurations for Sybase ASE 15.x. Something similar to this:
    Sybase ASE 15 Best Practices: Query Processing & Optimization White Paper-Technical: Database Management - Syba…
    Thanks!

    Hi David,
    This is something I found on the Sybase site:
    Database Encryption Design Considerations and Best Practices for ASE 15
    http://www.sybase.com/files/White_Papers/ASE-Database-Encryption-3pSS-011209-wp.pdf
    ASE Encryption Best Pracites:
    http://www.sybase.com/files/Product_Overviews/ASE-Encryption-Best-Practices-11042008.pdf
    If these do not help, you can search for others at:
    www.sybase.com > serach box on the top right.
    I searched "best pracitces security"
    Can also run advanced search > I typed in "ssl" into exact phrase.
    Hope this helps,
    Ryan

  • Is there an Apple article on a secure way to check for software updates (OS 10.6x)?

    I recently heard about malware that can be introduced by downloading an innocent-looking software update, e.g., Adobe Acrobat or Flashplayer.  I'd like to set all my programs either to update manually or to automatically let me know that an update is available but not download (e.g., in Microsoft Office).
    OS 10.6 has always notified me automatically and asked me if I wanted to install. I'd like to put a "brake" on my tendency to just click "Install," so I looked for software update preferences, but couldn't find them.  Can anyone point me to an Apple article that tells me how to do this?  Thanks!

    If you are simply referring to Apple software updates then it will depend on the OS you are using.   For example, there will be no more updates for 10.6.8 Snow Leopard than what is revealed by you clicking 'software update' ... unless some mind blowing security matter arises.   You need to be able to choose once you get to Yosemite and that is where Eric's suggestion of the forums is so relevant.   The newest OS tends to have its early updates fairly regularly as the public at large find its faults.   As I understand it, there are some who doubt 10.6.3 sufficiently to discourage me, if I used that OS.
    And I have to agree with Bob.   Too many rogue companys can trick you into downloading basically decent software but having injected malware before you get it.   SOFTONIC, DOWNLITE, MACPAW ZEOBIT and anything UTORRENT are to avoid.

  • Looking for a Darknet/Secure BBS app

    I have been a fan of Haxial KDX for the longest time, but due to the bugs, etc., I would like to move on.  I'm looking for a secure darknet/bbs styled program that supports chat, filesharing, and of basic user management (who can login, who can't, etc..).  I have been asking this question all over the web, and haven't gotten (or found) a single response.  Waste has never worked right for me, by the way.  I would definitely prefer it to be open source, which is why I thought it best to post here.  Please help out, or at least direct me somewhere where I should ask... Thanks.
    As an aside, the guy who wrote KDX and Hotline (Adam?? Hinckley) claimed on the Haxial website that he is willing to sell the project.  I wouldn't mine purchasing and restarting the KDX Project, but I've been unable to get in contact with him.  So...if you are him, or know him, or own the rights to Haxial KDX and all related projects...$$$$$
    Last edited by xen0blade (2010-01-12 13:18:15)

    I've recently become a big fan of OneSwarm - http://oneswarm.cs.washington.edu - I like that it supports remote access.
    But I'm definitely interested to see what this thread brings up!
    Last edited by hAyZe (2010-01-11 20:50:45)

Maybe you are looking for

  • LR4 Flag Sorting in Collections no longer working

    I get that the flags are carring over to collections now, when before they didn't.  In lightroom 4 beta, I didn't have problems tagging some of the flagged images as regects and then filtering the results from those left flagged, to those changed to

  • How to include the pages dynamically in JSF

    Hi all Below is static include <jsp:include page="../inc/sideMenu.inc"/>How to include the file dynamically Thanks Sudhakar

  • Xbox 360 meets IMAC

    Is it possible/advisable to run an xbox 360 through an IMAC. will there be significant delay? how is it done? Thanks J_Rock

  • Error -41106 when trying to open a word template

    when I run it saids that Word or Excel in not loaded on the system but it is and failes to open the word window. It does open an excel if I change the file type.

  • Why is everything I import from Photoshop pixelated?

    I'm using both Adobe After Effects CS5 and Adobe Photoshop CS5 and no matter what I import from Photoshop, wheather it'd be an image or text or anything, it is always pixelated.. It has nothing to do with the size because no matter what the scale is,