Uploaded by Rao Muhammad Rafique

MS210400048 MRafique CS713 Assignment No 01

advertisement
Assignment No: 01
Program: MS (Computer Science)
Semester: 3rd Semester
Course Code: CS713
Object Oriented DBMS
Course Instructor: Dr. Nida Anwar
Student ID: MS210400048
Student Name: Muhammad Rafique
Virtual University of Pakistan
Submitted By: MS210400048 Rao Muhammad Rafique
Page 1
Solution: Question No. 1 (a)
(15 Marks)
Architectural Design of Online Vehicle Service Reservation System
Service Center Module
Customer Module
Add, Update and Delete
Service Centers
Information
Add, Update and Delete
Customers Information
Email/SMS Notification
Module
Manage Email /SMS
notifications Preferences
Online Vehicle
Reservation
System
Vehicle Information
Module
Manage Vehicle
Information
Super Admin Module
Booking Request Module
Manage
Booking/Appointment
Requests for Vehicle
Service/Maintenance
Manage Service Centers
Add, update and Delete
Service Centers
Fig: Architectural Design of Online Vehicle Service Reservation System
Submitted By: MS210400048 Rao Muhammad Rafique
Page 2
Solution:
on: Question No. 1 (b)
(15 Marks)
Sr.#
Relationship Between Tables
Primary Key &
Foreign Key
1
ServiceCenterOwners &
ServiceCenters
ID &
service_center_id
One To
Many
2
Customers & Vehicles
ID &
vehicle_owner_id
One to Many
3
Bookings and Vehicles,
Customers and
ServiceCenters
One to many
and Many to
many as well.
4
Email_SMS_Notifications
ID &
vehicle_owner_id,
customer_id,
service_center_id
ID & Booking_id
etc
Submitted By: MS210400048 Rao Muhammad Rafique
Relationship
Type
One to Many
Relationship
Description
One Person can
have many Service
Centers.
One Customer can
have many
vehicles
One Vehcile can
have many service
centers and
Onwers as well.
One Booking can
have many sms
and email alerts.
Page 3
Problem No. 2
(20 Marks)
Read the paper entitled as “A Review of Database Security Concepts, Risks, and Problems”
available in the zip folder.
(a) Give critical analysis of the above paper in your own words.
I this paper author has presented different database security concepts, risks and
problem in a very perfect manner. The author first listed all the main concepts of
security threats that mainly include Intruders (InS), insiders (IS) and administrators.
Authors also presented different types of attacks that mainly include direct attacks,
indirect attacks; active and passive attacks as well. Author presented various types
database security threats along with prevention techniques that mainly include
different privileged based security threats including SQL injection as well.
Author presented different security prevention techniques that include access
controllers, inference strategy, identification and authorization of users, audit
accountability and encryption as well.
b) Suggest the kind of attacks and threats against which a database should be secured,
with possible remedies against them.
Answer: The following are the attacks and threats of the security of the database with
possible remedies:








Insider Threats:
Human Error. ...
Exploitation of Database Software Vulnerabilities. ...
SQL/NoSQL Injection Attacks. ...
Buffer Overflow Attacks. ...
Denial of Service (DoS/DDoS) Attacks. ...
Malware. ...
An Evolving IT Environment.
Following are the remedies for all the above security attacks/threats.
1.
2.
3.
4.
5.
Encrypt all the files and backup
Disable network access
Regularly patch servers
Lockdown accounts
Ensure physical security
Submitted By: MS210400048 Rao Muhammad Rafique
Page 4
Download