database concepts

Data security measures include:

Data management software protections

• Passwords to both the university network and Oracle (authentication scheme)
• Data encryption used across the network
• Restricted access to the database, you can change your tables but not someone else’s tables (authorisation scheme)
• Backup and recovery processes implemented.

Administrative policies and procedures

• Enrolment procedures: only CDU students are given CDU computer accounts and further only students enrolled in database units can gain access to Oracle.
• IT users policy: defines what is fair usage of the computer accounts
• ITMS procedures for backing up and managing the Oracle account

Physical protections

• Only authorised access is allowed to the labs, need to have a student card
• Security cameras in the lab
• Security guards
• Oracle server is kept in a secure room, if you don’t know where it is then that is an extra security!
• Standard building protection to the server: cyclone standard, fire alarms, UPS etc

Note that allowing access from outside the university circumvents many of the measures listed above. Increased access often poses and increased security risk and risk management is finding the appropriate balance.