Securing sensitive data within databases is a paramount concern for modern applications. Traditional database access control mechanisms often fall short in providing the fine-grained control and centralized management required to mitigate evolving security threats. This paper examines the limitations of conventional database access control practices and introduces m-NGAC (embedded Next Generation Access Control), a novel system that embeds the ANSI/INCITS NGAC standard directly within the database. By enforcing access control at the level of individual column data right in the database, m-NGAC offers a significant advancement over traditional methods and ensures data security, regardless of the querying tool, including SQL editors. This paper details the architecture and functionality of m-NGAC and highlights its key advantages in achieving robust and generic solutions with fine-grained access control.
Securing sensitive data within databases is a paramount concern for modern applications. Traditional database access control mechanisms often fall short in providing the fine-grained control and centralized management required to mitigate evolving security threats. This paper examines the...
See full abstract
Securing sensitive data within databases is a paramount concern for modern applications. Traditional database access control mechanisms often fall short in providing the fine-grained control and centralized management required to mitigate evolving security threats. This paper examines the limitations of conventional database access control practices and introduces m-NGAC (embedded Next Generation Access Control), a novel system that embeds the ANSI/INCITS NGAC standard directly within the database. By enforcing access control at the level of individual column data right in the database, m-NGAC offers a significant advancement over traditional methods and ensures data security, regardless of the querying tool, including SQL editors. This paper details the architecture and functionality of m-NGAC and highlights its key advantages in achieving robust and generic solutions with fine-grained access control.
Hide full abstract
