Reference model for data management security and privacy

Abstract

To establish a basis for discussion of security and privacy for data management, a few fundamental notions need to be defined. In its most general interpretation a database is a structured collection of information. A data management system is intended as a unique means of providing access to transient information or the information stored in a database. This paper provides a condensed version of the full reference model, whose purpose is to provide a basis for the development of standards in data management security and privacy.