Security and Privacy: Challenges and Defending Solutions for NoSQL Data Stores

Published in NoSQL Database for Storage and Retrieval of Data in Cloud, 2017

Recommended citation: Aneja S, Aneja N. "Security and Privacy: Challenges and Defending Solutions for NoSQL Data Stores", book chapter in NoSQL Database for Storage and Retrieval of Data in Cloud, 237-250., Taylor & Francis Group, CRC Press 2017, Print ISBN: 978-1-4987-8436-8, eBook ISBN: 978-1-4987-8437-5 https://www.taylorfrancis.com/books/e/9781315155579/chapters/10.1201/9781315155579-13

Abstract

Relational database management systems (RDBMSs) have traditionally been used to store and manage data from Internet, Intranet, or Desktop applications in order to serve multiusers systems. RDBMS has also been known to provide flexible services with a wide range of scalability. In traditional RDBMSs, role-based access control (RBAC) models have been implemented in commercial products like Oracle, MySQL, and PostgreSQL and many more with some variations from each other. Privacy is an important factor for data stores in addition to the security. The chapter discusses security of traditional database systems using an example of PostgreSQL database system. It explains RBAC and its variations with an example of PostgreSQL and describes the basic RBAC model in context of MongoDB. The chapter also explains the procedure to create user, roles, and functionalities provided in MongoDB for user authentication and access control. It explores possible modifications proposed for basic RBAC.