Database Threats

WEEK 4 ASSIGNMENT.

1. Based on the David's notes identify the threats to the database system.

ANS: THREATS:

Privilege abuse: Legitimate Database users have been provided with privileges that exceed their day to day functions. In the hospital set up. it means some personnel have been authorized to access records that do not relate to their areas of expertise. Someone can therefore doctor financial records to suite a friend’s need or even steal vital information from the hospital.

Excessive and Unused Privileges-Users have been given database privileges that exceed their jurisdiction. This exposes the database to threats e.g. the worker who leaves the hospital in bad terms may decide to cause massive damage to the data.

Physical damage-There have been incidents of fire in the Kitchen, the kitchen boarders the server room .The server hosts the main database hence the database is vulnerable to physical damage.

Theft-There has been an incident where a laptop of vendor staff has been stolen. The physical security of servers and backups is unsecure hence they run the risk of being stolen.

Operating System vulnerabilities: There exists a threat relating to the operating system which has been brought about by administration failing to make patches in the holes. This could lead to unauthorized excess culminating in denial of service.

Database root kits: This is a program that provides administration level privileges. Since no periodic audit trails are done in the hospital database, it’s possible for IT personnel with malicious intentions to install the program which has the ability to turn off intrusion detection system.

Input Injection (Formerly SQL Injection)-This may occur where a user inserts unauthorized or malicious statements into the input fields. This process may result into an attacker gaining unauthorized access to the system’s database.

Storage Media Exposure-The backups are unreliable and secure. This means they are vulnerable to theft....