Security and Privacy: Challenges and Defending Solutions for NoSQL Data Stores

Published in NoSQL: Database for Storage and Retrieval of Data in Cloud, 2017

Recommended citation: Sandhya Aneja, Nagender Aneja "Security and Privacy: Challenges and Defending Solutions for NoSQL Data Stores." NoSQL: Database for Storage and Retrieval of Data in Cloud, 2017. pp. 237--250 doi: 10.1201/9781315155579-13 https://www.taylorfrancis.com/chapters/edit/10.1201/9781315155579-13/security-privacy-challenges-defending-solutions-nosql-data-stores-sandhya-aneja-nagender-aneja

(Book Chapter)

Access paper here

Abstract: Relational database management systems (RDBMSs) have traditionally been used to store and manage data from the Internet, Intranet, or Desktop applications to serve multiple systems. RDBMS has also been known to provide flexible services with a wide range of scalability. In traditional RDBMSs, role-based access control (RBAC) models have been implemented in commercial products like Oracle, MySQL, PostgreSQL, and many more with some variations from each other. Privacy is an important factor for data stores in addition to the security. The chapter discusses the security of traditional database systems using a PostgreSQL database system. It explains RBAC and its variations with an example of PostgreSQL and describes the basic RBAC model in the context of MongoDB. The chapter also explains the procedure to create users, roles, and functionalities provided in MongoDB for user authentication and access control. It explores possible modifications proposed for basic RBAC.