Abstract:<div>As organizations depend on, possibly distributed, information systems for operational, decisional and strategic activities, they are vulnerable to security breaches leading to data theft and unauthorized disclosures even as they gain productivity and efficiency advantages. Though several techniques, such as encryption and digital signatures, are available to protect data when transmitted across sites, a truly comprehensive approach for data protection must include mechanisms for enforcing access control policies based on data contents, subject qualifications and characteristics, and other relevant contextual information, such as time. It is well understood today that the semantics of data must be taken into account in order to specify effective access control policies. To address such requirements, over the years the database security research community has developed a number of access control techniques and mechanisms that are specific to database systems. In this monograph, we present a comprehensive state of the art about models, systems and approaches proposed for specifying and enforcing access control policies in database management systems. In addition to surveying the foundational work in the area of access control for database systems, we present extensive case studies covering advanced features of current database management systems, such as the support for fine-grained and context-based access control, the support for mandatory access control, and approaches for protecting the data from insider threats. The monograph also covers novel approaches, based on cryptographic techniques, to enforce access control and surveys access control models for objectdatabases and XML data. For the reader not familiar with basic notions concerning access control and cryptography, we include a tutorial presentation on these notions. Finally, the monograph concludes with a discussion on current challenges for database access control and security, and preliminary approaches addressing some of these challenges.<h3>Suggested Citation</h3>Elisa Bertino, Gabriel Ghinita and Ashish Kamra (2011), "Access Control for Databases: Concepts and Systems", Foundations and Trends® in Databases: Vol. 3: No. 1–2, pp 1-148. http://dx.doi.org/10.1561/1900000014</div>

Survey of Security in Database

A Reference Model And System Architecture For Database Firewall

Research on security extensions based on Java 2 security architecture

Research on Information Security Model and Security System Design

Progress of Cryptographic Access Control and Encryption Security Database

Database Security: An Overview and Analysis of Current Trend

Database Security: A Historical Perspective

Research Work and Progress in Database Security

A Survey on Techniques of Database Encryption and Query over Encrypted Data

A Review of Database Security Concepts, Risks, and Problems

Threat Analysis And Security Protection For Malicious Dbms

A New Database Security Scan System

Design and Development of a Defense-in-Depth Model for Database Security

The Study of Password Security of Access 2010

Influence of Data Mining on Database Security

Access Control for Databases: Concepts and Systems

Data Security and Protection Techniques in Big Data：a Survey

New Database Security Auditing System

Research on Database Privacy Protection

SQL queries over encrypted databases: a survey

Research on Security Mechanisms of Outsourced Database