Database Security (CY-802 (A)) - Important Questions

Why might traditional cryptographic algorithms be unsuitable for resource-constrained devices?

Provide two reasons why traditional cryptographic algorithms might not be suitable for resource-constrained devices.

How might security threats for tiny devices differ from those for traditional computers?

In simple terms, why might standard encryption methods not be suitable for small devices (e.g., phones, sensors)?

Explain the access control structures used in database systems. Describe discretionary access control (DAC), mandatory access control (MAC), and role-based access control (RBAC), and discuss how each is implemented in a relational DBMS with examples and trade-offs.

Describe the Bell and LaPadula model and the Biba model. Compare their security goals and explain the kinds of database environments where each model is appropriate.

Explain the Database Security Lifecycle and illustrate each phase with examples of technical and administrative controls, and relevant metrics to measure effectiveness.

List and explain common internal and external threats to a database system. For each threat provide at least one practical mitigation technique and briefly discuss implementation considerations.

Perform a simple data risk assessment for a confidential database: identify asset value, estimate likelihood and impact, and compute residual risk after applying an encryption control. Show calculations and justify assumptions.