need help with 2 questions oracle

Anonymous
timer Asked: Jul 3rd, 2018
account_balance_wallet $10

Question description

a scenario and the questions. 4 qnd 5 only

i need only 4 and 5.

please check attached file.

i need correct solution.

thank you

Database Security DBST 668 Instructions: Answers to be numbered and in order. Include the page number and your name on each page. For questions 4 - 5 use the Scenario contained in the SQL Scripts provided as a separate attachment. 1. Security Plans, Policies, Procedures, and Models (15 points). a. Describe the key features of a Security Plan (What is it? Why is it important? What are its key parts? Who is it for? How does it work or not work? (problems with creating and implementing). b. What is the role of Security Policies and Procedures? (What is a Security Policy? What is a Security Procedure? How does each of them relate to the Security Plan? How do they relate to each other?) c. What is the purpose of a Security Model? (What do models do? How do they do it? What is in a model? What is not in a model?) 2. Access Matrix Model, Access Control Lists (10 points) a. Describe the Access Matrix Model (Key features, and a graphic example) b. Describe the How Access Control Lists are used (Key features, graphic example) 3. Bell-LaPadula Model (15 points) Describe the Bell-LaPadula Model (What kind of model is it? What are its key Features? What are its key Axioms? ( include a graphic example) 4. Show the answers to the following SQL commands [Based on the Attached Scenario] (15 points). a. b. c. UPDATE Student SET Status = ‘SM’ WHERE Name = ‘CHARLES’; (by User FRED) UPDATE faculty SET Rank = ‘Professor’ WHERE Name = ‘LOONEY’; (by User LOONEY) UPDATE faculty SET Address = ’14 West’ WHERE Name = ‘MARTIN’; (by User LOONEY) 1 5. Jajodia Sandhu Model (30 points). Employee SSN C1 Name C2 Salary C3 DN C4 TC 001 U Able S 20000 U C100 U S 002 U Bond U 45000 S C200 U S 003 U Coe C 70000 S C300 C S 004 U Drake C 135000 TS C400 C TS Suggested way to proceed: Take the original multilevel table given and decompose it into two tables. One at the Secret level (containing everything that should be shown as the Secret Level) and one at the Top Secret level (which is actually the same as the original table at this point). Use these two freshly created tables as the input tables for both parts a and b (in other words DO NOT use the OUTPUT result from a as input to b). For part a. Apply all the transaction to the two new tables and show the end result as your answer to part a (as updated set of both tables). For part b. Apply all the transaction to another fresh copy of the two new table (meaning don't use the output tables from part a as input to part b) and show the end result as your answer to part b. a. Suppose an S-subject requests the following insert operations (show the effect on the instance tables for both the secret and top secret level). Your answer will be two new tables (one at the Secret Level and One at the Top Secret Level -- with the necessary changes included --) that show the result of the inset and update transactions below (15 points). INSERT INTO Employee VALUES 005, “Jones”, 80000, “C400”; INSERT INTO Employee VALUES 001, “Able”, 90000, “C300”; UPDATE Employee SET Salary = 50000 WHERE Name = “Bond” or “Drake”; 2 b Suppose a TS-subject request the following insert/update operations (show the effect on the instance tables for both the secret and top secret level). Your answer will be two new tables -- with the necessary change included -- that show the result of the inset and update transactions below (15 points). Remember: For part b. Apply all the transaction to another fresh copy of the two new table (meaning don't use the output tables from part a as input to part b) and show the end result as your answer to part b. INSERT INTO Employee VALUES 002, “Bond”, 90000, “C300”; UPDATE Employee SET Salary = 60000; NOTE: There is NO WHERE Clause in this statement. This is intentional. 3
Scenario SQL> SHOW USER USER is ‘MICHAEL’; NOTE: Michael as a user already exists. Michael has DBA rights. All the tables are created by Michael. All the roles are created by Michael. All the Users are created by Michael. SQL> CREATE ROLE FACULTY; Role created. SQL> DESC STUDENT; Name Null? Type ----------------------------------------- -------- ---------------------------STUDENTID NOT NULL NUMBER(3) NAME VARCHAR2(10) MAJOR VARCHAR2(16) STATUS VARCHAR2(2) GPA NUMBER(3,2) AGE VARCHAR2(2) SQL> SELECT * FROM STUDENT; STUDENTID NAME MAJOR ST GPA AG ---------- ---------- ---------------- -- ---------- -100 ABLE HISTORY SR 3 21 200 BAKER ACCOUNTING JR 2.7 19 300 CHARLES MATH SR 3.5 22 400 DRAKE COMPUTER SCIENCE FR 2.8 18 500 ELLIOT COMPUTER SCIENCE SM 3.25 19 600 NED ENGINEERING SM 3.55 17 700 TED MUSIC SR 3.75 21 800 FRED ART SM 3.25 19 900 RED PSYCHOLOGY SM 3.25 19 9 rows selected. SQL> DESC FACULTY; Name Null? Type ----------------------------------------- -------- ---------------------------FACULTY_ID NOT NULL NUMBER(4) NAME VARCHAR2(10) 1 DEPARTMENT ADDRESS RANK VARCHAR2(2) VARCHAR2(12) VARCHAR2(10) SQL> SELECT * FROM FACULTY; FACULTY_ID NAME DE ADDRESS RANK ---------- ---------- -- ------------ ---------980 MARTIN IM 11 MAIN President 5430 SEAVER IS 2 IRELAND PROFESSOR 7650 LOONEY IT 14 NORTH INSTRUCTOR 9870 MILLS SA 16 EAST LECTURER 1968 MICHAEL IM 912 BROWN DEAN SQL> DESC OFFERING; Name Null? Type ----------------------------------------- -------- ---------------------------OFFERINGNUM NOT NULL NUMBER(4) COURSENUM VARCHAR2(5) FACULTYID NUMBER(4) TERM VARCHAR2(6) YEAR VARCHAR2(4) TIME VARCHAR2(5) SQL> DESC ENROLLMENT; Name Null? Type ----------------------------------------- -------- ---------------------------OFFERINGNUM NOT NULL NUMBER(4) STUDENTID NOT NULL NUMBER(3) SQL> CREATE USER TED IDENTIFIED BY T; User created. SQL> CREATE USER NED IDENTIFIED BY N; User created. SQL> CREATE USER FRED IDENTIFIED BY F; User created. SQL> CREATE ROLE STUDENT; Role created. 2 SQL> GRANT SELECT ON STUDENT TO STUDENT; Grant succeeded. SQL> GRANT SELECT ON OFFERING TO STUDENT; Grant succeeded. SQL> GRANT STUDENT TO TED, NED, FRED; Grant succeeded. SQL> GRANT UPDATE (STATUS, AGE, GPA) ON STUDENT TO FRED; Grant succeeded. SQL> CREATE USER RED IDENTIFIED BY R; User created. SQL> GRANT CREATE SESSION TO STUDENT; Grant succeeded. SQL> GRANT UPDATE ON STUDENT TO RED; Grant succeeded. SQL> GRANT CONNECT TO RED; Grant succeeded. SQL> GRANT CREATE SYNONYM TO TED, NED, RED; Grant succeeded. SQL> CONNECT TED/T Connected. SQL> CREATE SYNONYM STUDENT FOR MICHAEL.STUDENT; Synonym created. SQL> CONNECT NED/N Connected. 3 SQL> CREATE SYNONYM STUDENT FOR MICHAEL.STUDENT; Synonym created. SQL> CONNECT RED/R Connected. SQL> CREATE SYNONYM STUDENT FOR MICHAEL.STUDENT; Synonym created. SQL> CONNECT MICHAEL/M Connected. SQL> CREATE VIEW MY_FACULTY_DATA AS SELECT FACULTY_ID, NAME, DEPARTMENT, ADDRESS, RANK FROM FACULTY WHERE NAME=USER; View created. SQL> CREATE VIEW SOME_STUDENT AS SELECT STUDENTID, NAME, MAJOR, STATUS FROM STUDENT; View created. SQL> GRANT SELECT, UPDATE(ADDRESS) ON MY_FACULTY_DATA TO FACULTY; Grant succeeded. SQL> GRANT SELECT ON SOME_STUDENT TO FACULTY; Grant succeeded. SQL> CREATE USER LOONEY IDENTIFIED BY L; User created. SQL> CREATE USER SEAVER IDENTIFIED BY S; User created. SQL> CREATE USER MARTIN IDENTIFIED BY M; User created. SQL> GRANT CREATE SYNONYM TO LOONEY, MARTIN, SEAVER; 4 Grant succeeded. SQL> GRANT FACULTY TO LOONEY, SEAVER, MARTIN; Grant succeeded. SQL> GRANT CREATE SESSION TO SEAVER, LOONEY, MARTIN; Grant succeeded. SQL> CONNECT LOONEY/L Connected. SQL> CONNECT LOONEY/L Connected. SQL> CREATE SYNONYM STUDENT FOR MICHAEL.SOME_STUDENT; Synonym created. SQL> CREATE SYNONYM FACULTY FOR MICHAEL.MY_FACULTY_DATA ; Synonym created SQL> CONNECT MARTIN/M Connected. SQL> CREATE SYNONYM STUDENT FOR MICHAEL.SOME_STUDENT; Synonym created. SQL> CONNECT SEAVER/S Connected. SQL> CREATE SYNONYM STUDENT FOR MICHAEL.SOME_STUDENT; Synonym created. SQL> CONNECT MICHAEL/M Connected. SQL> CREATE USER SMITH IDENTIFIED BY VALUES 'SMITH0#'; User created. SQL> GRANT SELECT ON STUDENT TO SMITH; 5 Grant succeeded. SQL> GRANT CREATE SESSION TO SMITH; Grant succeeded. 6

Tutor Answer

Starckoverflow
School: University of Maryland

Attached.

4.
a) Answer
SQL> connect fred/F
Connected.
SQL> UPDATE Student SET Status = 'SM' WHERE...

flag Report DMCA
Review

Anonymous
Excellent job

Similar Questions
Hot Questions
Related Tags

Brown University





1271 Tutors

California Institute of Technology




2131 Tutors

Carnegie Mellon University




982 Tutors

Columbia University





1256 Tutors

Dartmouth University





2113 Tutors

Emory University





2279 Tutors

Harvard University





599 Tutors

Massachusetts Institute of Technology



2319 Tutors

New York University





1645 Tutors

Notre Dam University





1911 Tutors

Oklahoma University





2122 Tutors

Pennsylvania State University





932 Tutors

Princeton University





1211 Tutors

Stanford University





983 Tutors

University of California





1282 Tutors

Oxford University





123 Tutors

Yale University





2325 Tutors