Abstract:<div>As organizations depend on, possibly distributed, information systems for operational, decisional and strategic activities, they are vulnerable to security breaches leading to data theft and unauthorized disclosures even as they gain productivity and efficiency advantages. Though several techniques, such as encryption and digital signatures, are available to protect data when transmitted across sites, a truly comprehensive approach for data protection must include mechanisms for enforcing access control policies based on data contents, subject qualifications and characteristics, and other relevant contextual information, such as time. It is well understood today that the semantics of data must be taken into account in order to specify effective access control policies. To address such requirements, over the years the database security research community has developed a number of access control techniques and mechanisms that are specific to database systems. In this monograph, we present a comprehensive state of the art about models, systems and approaches proposed for specifying and enforcing access control policies in database management systems. In addition to surveying the foundational work in the area of access control for database systems, we present extensive case studies covering advanced features of current database management systems, such as the support for fine-grained and context-based access control, the support for mandatory access control, and approaches for protecting the data from insider threats. The monograph also covers novel approaches, based on cryptographic techniques, to enforce access control and surveys access control models for objectdatabases and XML data. For the reader not familiar with basic notions concerning access control and cryptography, we include a tutorial presentation on these notions. Finally, the monograph concludes with a discussion on current challenges for database access control and security, and preliminary approaches addressing some of these challenges.<h3>Suggested Citation</h3>Elisa Bertino, Gabriel Ghinita and Ashish Kamra (2011), "Access Control for Databases: Concepts and Systems", Foundations and Trends® in Databases: Vol. 3: No. 1–2, pp 1-148. http://dx.doi.org/10.1561/1900000014</div>

Security Policies for Securing Cloud Databases

Privacy-Preserving Protocol for Data Stored in the Cloud

Analysis of Key Technologies on Cloud Computing Security

Advanced Encryption Techniques for Database Security in Cloud Environments

Database Security Issues and Challenges in Cloud Computing

A combined approach to ensure data security in cloud computing

An Effective Approach for the Protection of Privacy Text Data in the CloudDB

Inter-Cloud Data Security Strategies

Dual Access Control for Cloud-Based Data Storage and Sharing

Achieving Secure, Scalable, and Fine-grained Data Access Control in Cloud Computing

An Overview on Data Security in Cloud Computing

Ensuring Security and Privacy Preservation for Cloud Data Services

Preventing Data Leakage in a Cloud Environment

SEC-NoSQL: Towards Implementing High Performance Security-as-a-Service for NoSQL Databases

A Comprehensive Review on Data Security and Threats for Data Management in Cloud Computing

Research on Cloud Databases

Securing Data Services: a Security Architecture Design for Private Storage Cloud Based on HDFS

A Database Security Access Control Method Based on Identity Authentication

A Survey on Property-Preserving Database Encryption Techniques in the Cloud

Access Control for Databases: Concepts and Systems

A Security Model for the Enhancement of Data Privacy in Cloud Computing