q Ø v v v v v v v v IBM - 2

Transcription

1 4

2 q Ø v v v v v v v v IBM - 2

3 Ø Ø security integrity IBM - 3

4 SQL IBM - 4

5 4.1.1 Ø database security v v DBMS v v v secure database trusted database IBM - 5

6 SQL IBM - 6

7 4.1.2 q TCB trusted computing base subject object identification & authentication discretionary access control mandatory access control data integrity hiding cannel formulization of database security audit access monitor IBM - 7

8 q ) TCB Ø Ø IBM -( 8

9 ) Ø v v ( v IBM - 9

10 Ø ) / ) / IBM - ( 10

11 ( q ( Ø ( ( Ø ( Ø ) ) ) TCB IBM - ( 11

12 Ø ) ) )» ) ) IBM - ( 12

13 » ) ( ( IBM - 13

14 ( ) ( IBM - 14

15 q DAC Ø ) Ø / ( 1 2 i 1 / 2 / j / / / IBM - 15

16 ) Ø ) ( DAC IBM - 16

17 Ø DAC Ø DAC ) ) Grant / Revoke IBM - ( 17

18 q MAC Ø ) ) / Ø )/ label label of security level ) label of security category ) Ø ) ) ( IBM - 18

19 ) Ø Bell-Lapadula ( ( Ø ) ) IBM - ) 19

20 ( ) Ø ( MAC Ø MAC ( IBM - 20

21 q Ø insert delete update Ø Ø ) IBM - ( 21

22 q Ø ( ( Ø TCB (/ Ø TCB Ø ) IBM - 22

23 q Ø ) Ø IBM - ( 23

24 q Ø / / / / / Ø ) DBMS ( ) IBM - 24

25 Ø ( ) IBM - 25

26 (» ) / / / IBM - 26

27 q Ø ( ) ) ) Ø TCB / TCB ( IBM - 27

28 SQL IBM - 28

29 4.1.3 q ( ) TCSEC Trusted Computer System Evaluation Criteria v D, C 1, C 2, B 1, B 2, B 3, A IBM - 29

30 4.1.3 q Ø 1999 GB TCSEC GB TCSEC - D 1 C1 2 C2 3 B1 4 B2 5 B3 - A IBM - 30

31 4.1.3 q GB IBM - 31

32 SQL IBM - 32

33 4.1.4 SQL q SQL 92 C 1 Ø / Ø Ø Ø IBM - 33

34 4.1.4 SQL q Ø SQL Grant Revoke Ø v SELECT v INSERT v DELETE v UPDATE v REFERENCE v EXECUTE v USAGE IBM - 34

35 4.1.4 SQL Ø type UDT / Ø IBM - 35

36 4.1.4 SQL Ø GRANT < > ON < > TO < > [WITH GRANT OPTION] grant SELECT UPDATE on S to XULIN with grant option grant UPDATE (G) on SC to XULIN IBM - 36

37 4.1.4 SQL Ø REVOKE < > ON < > FROM < > [RESTRICT CASCADE] CASCADE RESTRICT revoke UPDATE on S from XULIN cascade IBM - 37

38 IBM - 38

39 4.2 q Ø Ø IBM - 39

40 4.2 q Ø q Ø Ø Ø q Ø Ø Ø IBM - 40

41 IBM - 41

42 4.2.1 q Ø Ø Ø IBM - 42

43 IBM - 43

44 4.2.2 q Ø Ø Ø Ø IBM - 44

45 4.2.2 Ø R F S K s R S F R R S R F NULL S IBM - 45

46 CS EN IBM - 46

47 4.2.2 E E001 E E012 E NULL IBM - 47

48 CS EN Foreign key( ) References On Delete Cascade; Foreign key( ) References On Delete Restrict; Foreign key( ) References On Delete Set Null; Foreign key( ) References On Delete No Action; IBM - 48

49 49 q restrict no action PAR PID NAME CID CDESC PID 1 PAR DESC 1 2 PAR DESC 2 3 PAR3 UPDATE PAR SET PID=PID-1 Ø restrict Ø no action 10/19/18 7:23 AM Websoft, Nanjing Univ.

50 IBM - 50

51 4.2.3 q Ø Ø DBMS Ø»» IBM - 51

52 4.2.3 q Ø Ø Ø assertion q Ø CONSTRAINT < > < > IBM - 52

53 SQL q CREATE TABLE Ø & & DEFAULT { default_constant NULL } IBM - 53

54 SQL q Ø { NOT NULL [ CONSTRAINT constraint_name ] UNIQUE PRIMARY KEY CHECK ( search_condition ) REFERENCES table_name [ ( column_name ) ] [ ON DELETE CASCADE RESTRICT SET NULL ] [ ON UPDATE CASCADE RESTRICT SET NULL ] } IBM - 54

55 SQL [ CONSTRAINT constraint_name ] { UNIQUE ( colname {, colname... } ) PRIMARY KEY ( colname {, colname... } ) CHECK ( search_condition ) FOREIGN KEY ( colname {, colname... } ) REFERENCES table_name [ ( colname {, colname... } ) ] [ ON DELETE CASCADE RESTRICT SET NULL ] [ ON UPDATE CASCADE RESTRICT SET NULL ] } IBM - 55

56 SQL q ØNOT NULL vs. DEFAULT NULL ØConstraint name ALTER TABLE ØUNIQUE vs. NOT NULL UNIQUE candidate key UNIQUE + NOT NULL IBM - 56

57 SQL q cont. ØPRIMARY KEY vs. NOT NULL ØREFERENCES FOREIGN KEY vs. PRIMARY KEY CASCADE RESTRICT SET NULL ØCHECK IBM - 57

58 SQL q Ø PRIMARY KEY( <column-list> ) Ø UNIQUE( <column-list> ) Ø FOREIGN KEY ( <fk-column-list> ) REFERENCES <table-name> ( <pk-column-list> ) [ ON UPDATE [ RESTRICT CASCADE SET NULL ] ] [ ON DELETE [ RESTRICT CASCADE SET NULL ] ] Ø CHECK( <condition> ) IBM - 58

59 SQL q Ø 1 CREATE TABLE Student ( sno NUMBER(5) CONSTRAINT C 1 CHECK (sno BETWEEN AND 99999), sname VARCHAR (20) CONSTRAINT C 2 NOT NULL, sage NUMBER(3) CONSTRAINT C 3 CHECK (sage<29) ); IBM - 59

60 SQL Ø 2 CREATE TABLE EMP Empno NUMBER (4), Ename VARCHAR (10), PersonId VARCHAR(15), Job VARCHAR (9), Mgr NUMBER (4), Sal NUMBER (7, 2), Deptno NUMBER (2), CONSTRAINT pk PRIMARY KEY( Empno ), CONSTRAINT uni_name UNIQUE ( PersonId ), IBM - 60

61 SQL CONSTRAINT fk_dept FOREIGN KEY( Deptno ) REFERENCES DEPT( Deptno ) ON UPDATE CASCADE ON DELETE RESTRICT, IBM - 61

62 SQL CONSTRAINT fk_mgr FOREIGN KEY( Mgr ) REFERENCES EMP( Empno ) ON UPDATE CASCADE ON DELETE SET NULL, IBM - 62

63 SQL CONSTRAINT chk_1 CHECK ( (Job= AND Sal>15000) OR (Job= AND Sal between 5000 and 10000) OR (Job<> AND Job<> AND Sal between 1000 and 5000) ) ); IBM - 63

64 SQL IBM - 64

65 SQL CS PASCAL PAS CHECK ( NOT ( (S # IN (SELECT S # FROM S WHERE sd= CS ) ) AND (C # IN (SELECT C # ) ); FROM C WHERE cn= PAS ) ) IBM - 65

66 SQL? PASCAL IBM - 66

67 SQL q Ø CREATE ASSERTION <name> CHECK( <condition> ) Ø DROP ASSERTION <assertion-name-list> IBM - 67

68 SQL 20 CREATE ASSERTION ass_1 CHECK ( 20 <= ALL ( SELECT COUNT(*) FROM SC GROUP BY C # ) ); IBM - 68

69 SQL q DS PASCAL PAS CREATE ASSERTION ass_2 CHECK ( NOT EXISTS ( SELECT * FROM SC WHERE C # IN ( SELECT C # ) ); FROM C WHERE cn = DS ) AND S # NOT IN ( SELECT SC X.S # FROM SC SC X, C WHERE SC X.C # = C.C # AND C.cn= PAS ) IBM - 69

70 IBM - 70

71 4.2.4 q Ø Ø Ø IBM - 71

72 q Ø Ø SQL Ø DBMS IBM - 72

73 4.2.4 q CREATE TRIGGER trigger_name { BEFORE AFTER } { INSERT DELETE UPDATE [ OF colname {, colname... } ] } ON table_name [ REFERENCING corr_name_def {,... } ] [ FOR EACH ROW FOR EACH STATEMENT ] [ WHEN ( search_condition ) ] { statement BEGIN ATOMIC statement; { statement;... } END IBM - 73

74 4.2.4 q The corr_name_def that defines a correlation name follows: { OLD [ ROW ] [ AS ] old_row_corr_name NEW [ ROW ] [ AS ] new_row_corr_name OLD TABLE [ AS ] old_table_corr_name NEW TABLE [ AS ] new_table_corr_name } IBM - 74

75 4.2.4 q DROP TRIGGER trigger_name ; IBM - 75

76 4.2.4 q 4.12 Ø Ø CREATE TRIGGER update_sal BEFORE INSERT or UPDATE(Sal, Pos) ON Teach FOR EACH ROW WHEN (:new.pos = ) /* */ BEGIN IF :new.sal < 1000 END IF; END THEN :new.sal := 1000; IBM - 76