Master of Computer Science

Database II

//Task2//(a,b,c,d,e)

Datenbanken II Advanced Database Concepts TU Clausthal, Institut fr Informatik Due date: 7 February 2023, 13:00 Please read carefully In this assignment we will use Neo4j again and practise role management and databe security. For the exercises, we will use the "Movie Database", which was already used in the first assignments and can be found on Moodle. Hint: You can find an overview of all Cypher commands under this url: https:/eo4j. com/docs/cypher-refcard/current/ Include all essential ideas and steps that are necessary to derive a solution in addition to an answer of a question. Write your solution in an understanding form or draw the respectively structure with some tool you might find fitting. You may need to format your files into .pdf! If there is missing information make an assumption and add it as a statement in your solution. Your assumption will hold for the entire assignment, if not declared otherwise. Task 2 7 Marks In this task, we will practice the access control mechanisms for database security. (a) What is role-based access control? In what ways is it superior to DAC and MAC? (b) What is a statistical database? Discuss the problem of statistical database security. (c) What are the different types of SQL injection attacks and what risks are associated with SQL injection attacks? Describe a preventive measurement against such an attack. (d) What are digital signatures? How do they work? Explain the types of information, which a digital certificate includes. (e) Solve Exercise 24.32. in the reading on 'Security'. Note: Figure 3.5. mentioned in the exercise is shown below