Controlling Database Security by Combination of Role-based Access Control (RBAC) and Mandatory Access Control (MAC)

Abstract

Database security is the system, processes, and procedures that protect a database from unintended activity. Unintended activity can be categorized as authenticated misuse, malicious attacks or inadvertent mistakes made by authorized individuals or processes. Database security can begin with the process of creation and publishing of appropriate security standards for the database environment. The standards may include specific controls for the various relevant database platforms; a set of best practices that cross over the platforms; and linkages of the standards to higher level polices and regulations. Proposed system presents constraint based security model implemented on student database to enhance data security by combination of Role Based Access Control (RBAC) and Mandatory Access Control (MAC).