Control subsystem of database administrators access of commercial enterprise
DOI:
https://doi.org/10.15587/1729-4061.2013.11705Keywords:
Database, control system, commercial information, user identification, unauthorized accessAbstract
Modern technologies led to the active development of the system of electronic information resources. Creation of large quantities of electronic data storages in information and communication systems creates the necessity to protect them from unauthorized access. One of the areas of information security is separation of access to information resources that will permit to improve the level of protection of information system against the unauthorized access and use of the system.
The aim of the study is to develop a control subsystem of database administrative access of a commercial enterprise, which automates the process of database control and increases the level of protection of information system against unauthorized access. As a result of research, we have conducted the analysis of technology of development of the control subsystem of administrator’s access of database, which help to determine the peculiarities of creation of such systems and technology of implementation of control subsystems. We suggested means of authorization of access control of legal users to system resources, enduing them with the rights, defined by the administrator, and control of execution of various system functions. We have implemented a prototype of the system, using the database control system SQL Microsoft Server 2008 and Microsoft Visual Studio 2010. We have developed forms for identification of users of subsystem control of database administrator access. We have prepared the users access rights to information resources of the information systemReferences
- Корченко, О. Г. Системи захисту інформації [Текст] : монографія / О. Г. Корченко. – К. : НАУ, 2004. – 264 с.
- Chen, P. P. The Entity-Relationship Model: Toward a Unified View of Data / P. P. Chen // ACM Trans. On Database Syst. – 1976. – V.1, №1. – P. 9-36.
- Codd, E. F. A relational model of data large shared data banks / E. F. Codd // Comm. ACM. – 1970. – V.13, №6. – P. 377-387.
- Кавун, С. В. Информационная безопасность в бизнесе [Текст] : научное издание / С. В. Кавун. – Харьков: ХНЭУ, 2007. – 408 с.
- Коннолли, Т. Базы данных. Проектирование, реализация и сопровождение. Теория и практика [Текст] : пер. с англ. / Т. Коннолли, К. Бегг. – 3-е изд. – М. : Изд. дом „Вильямс, 2003. – 1440 с.
- Дейт, К. Дж. Введение в системы баз данных [Текст] : пер. с англ. / К. Дж. Дейт. – 8-е изд. – М. : Изд. дом „Вильямс, 2005. – 1328 с.
- Хомоненко, А. Д. Базы данных [Текст] : учебник для высш. учеб. заведений / А. Д. Хомоненко, В. М. Цыганков, М. Г. Мальцев; под ред. проф. А. Д. Хомоненко. – 4-е изд., доп. и перераб. – СПб. : Изд. дом „KOPOНА-принт”, 2004. – 736 с.
- Харрингтон, Дж. Л. Проектирование реляционных баз данных [Текст] / Дж. Л. Харрингтон. – М.: Изд-во „Лори, 2006. – 232 с.
- Поповский, В. В. Защита информации в телекоммуникационных системах [Текст]: ученик в 2-х томах / В. В. Поповский, А. В. Персиков. – Харьков: ООО „Компания СМИТ, 2006. – Т.2. – 292 с.
- Грибунин, В. Г. Комплексная система зашиты информации на предприятии [Текст] : учеб. пособие для студ. высш. учеб. заведений / В. Г. Грибунин, В. В. Чудовский. – М.: Изд. центр „Академия, 2009. – 416 с.
- Korchenko, O. G. Systems of priv: monograph, Kyiv: NAU, 2004, 264 p.
- Chen, P. P. (1976). The Entity-Relationship Model: Toward a Unified View of Data. ACM Trans. On Database Syst., V.1, №1, 9-36.
- Codd, E. F. (1970). A relational model of data large shared data banks. Comm. ACM, V.13, №6, 377-387.
- Kavun, S. V. Informative safety is in business: scientific edition, Kharkov: KhNEU, 2007, 408 p.
- Connolly, T., Begg, C. Databases. Planning, realization and accompaniment. Theory and practice: translation from English, Moscow: Vil’yams, 2003, 1440 p.,
- -th Edition.
- Deit, K. Dzt. Introduction to the systems of bases of data: translation from English, Moscow: Vil’yams, 2005, 1328 p., 8-th Edition.
- Кhomonenko, A. D., Tsygankov, V. M., Maltsev, М. G. Databases: textbook for higher educational establishments : edited prof. A. D. Кhomonenko, Sankt-Petersburg: KORONА-print, 2004, 736 p., 4-th Edition.
- Кharrington Dzt. L. Planning of relational databases, Moscow: Lori, 2006, 232 p.
- Popovsky, V. V., Persikov, A. V. A priv is in the telecommunication systems: textbook in 2 vol., Кharkov : Company SMIT Ltd, V.2, 2006, 292 p.
- Gribunin, V. G., Chudovsky, V. V. Complex system of priv on an enterprise: train aid for the students of higher educational establishments, Moscow: Academy, 2009, 416 p.
Downloads
Published
How to Cite
Issue
Section
License
Copyright (c) 2014 Ігор Анатолійович Пількевич, Надія Миколаївна Лобанчикова, Володимир Іванович Котков, Олександр Володимирович Метельський
This work is licensed under a Creative Commons Attribution 4.0 International License.
The consolidation and conditions for the transfer of copyright (identification of authorship) is carried out in the License Agreement. In particular, the authors reserve the right to the authorship of their manuscript and transfer the first publication of this work to the journal under the terms of the Creative Commons CC BY license. At the same time, they have the right to conclude on their own additional agreements concerning the non-exclusive distribution of the work in the form in which it was published by this journal, but provided that the link to the first publication of the article in this journal is preserved.
A license agreement is a document in which the author warrants that he/she owns all copyright for the work (manuscript, article, etc.).
The authors, signing the License Agreement with TECHNOLOGY CENTER PC, have all rights to the further use of their work, provided that they link to our edition in which the work was published.
According to the terms of the License Agreement, the Publisher TECHNOLOGY CENTER PC does not take away your copyrights and receives permission from the authors to use and dissemination of the publication through the world's scientific resources (own electronic resources, scientometric databases, repositories, libraries, etc.).
In the absence of a signed License Agreement or in the absence of this agreement of identifiers allowing to identify the identity of the author, the editors have no right to work with the manuscript.
It is important to remember that there is another type of agreement between authors and publishers – when copyright is transferred from the authors to the publisher. In this case, the authors lose ownership of their work and may not use it in any way.