Assignment No: 01 Program: MS (Computer Science) Semester: 3rd Semester Course Code: CS713 Object Oriented DBMS Course Instructor: Dr. Nida Anwar Student ID: MS210400048 Student Name: Muhammad Rafique Virtual University of Pakistan Submitted By: MS210400048 Rao Muhammad Rafique Page 1 Solution: Question No. 1 (a) (15 Marks) Architectural Design of Online Vehicle Service Reservation System Service Center Module Customer Module Add, Update and Delete Service Centers Information Add, Update and Delete Customers Information Email/SMS Notification Module Manage Email /SMS notifications Preferences Online Vehicle Reservation System Vehicle Information Module Manage Vehicle Information Super Admin Module Booking Request Module Manage Booking/Appointment Requests for Vehicle Service/Maintenance Manage Service Centers Add, update and Delete Service Centers Fig: Architectural Design of Online Vehicle Service Reservation System Submitted By: MS210400048 Rao Muhammad Rafique Page 2 Solution: on: Question No. 1 (b) (15 Marks) Sr.# Relationship Between Tables Primary Key & Foreign Key 1 ServiceCenterOwners & ServiceCenters ID & service_center_id One To Many 2 Customers & Vehicles ID & vehicle_owner_id One to Many 3 Bookings and Vehicles, Customers and ServiceCenters One to many and Many to many as well. 4 Email_SMS_Notifications ID & vehicle_owner_id, customer_id, service_center_id ID & Booking_id etc Submitted By: MS210400048 Rao Muhammad Rafique Relationship Type One to Many Relationship Description One Person can have many Service Centers. One Customer can have many vehicles One Vehcile can have many service centers and Onwers as well. One Booking can have many sms and email alerts. Page 3 Problem No. 2 (20 Marks) Read the paper entitled as “A Review of Database Security Concepts, Risks, and Problems” available in the zip folder. (a) Give critical analysis of the above paper in your own words. I this paper author has presented different database security concepts, risks and problem in a very perfect manner. The author first listed all the main concepts of security threats that mainly include Intruders (InS), insiders (IS) and administrators. Authors also presented different types of attacks that mainly include direct attacks, indirect attacks; active and passive attacks as well. Author presented various types database security threats along with prevention techniques that mainly include different privileged based security threats including SQL injection as well. Author presented different security prevention techniques that include access controllers, inference strategy, identification and authorization of users, audit accountability and encryption as well. b) Suggest the kind of attacks and threats against which a database should be secured, with possible remedies against them. Answer: The following are the attacks and threats of the security of the database with possible remedies: Insider Threats: Human Error. ... Exploitation of Database Software Vulnerabilities. ... SQL/NoSQL Injection Attacks. ... Buffer Overflow Attacks. ... Denial of Service (DoS/DDoS) Attacks. ... Malware. ... An Evolving IT Environment. Following are the remedies for all the above security attacks/threats. 1. 2. 3. 4. 5. Encrypt all the files and backup Disable network access Regularly patch servers Lockdown accounts Ensure physical security Submitted By: MS210400048 Rao Muhammad Rafique Page 4