
Python as an automation tool in IS. Protecting Database Access in Python
Author(s) -
V Y Dronov,
G A Dronova
Publication year - 2022
Publication title -
journal of physics. conference series
Language(s) - English
Resource type - Journals
SCImago Journal Rank - 0.21
H-Index - 85
eISSN - 1742-6596
pISSN - 1742-6588
DOI - 10.1088/1742-6596/2182/1/012093
Subject(s) - python (programming language) , computer science , login , database , sql , password , software , computer security , programming language
The activity of modern organizations, regardless of the form of ownership, is highly risky. There are up to 600 risk factors in total. It is possible to reduce risk levels only after assessing them. The basis of risk assessment is analytical processing of information relating to the sphere of organization’s activity. The information to be analyzed is usually accumulated in databases. This information is usually accessed with SQL queries and analyzed with application software. The most rational variant is when the business unit employees are able to select the data from the database and perform their analytics independently. The most convenient, both for sampling information from databases, and for its analysis to use python. However, python, which is an interpreted language, has a disadvantage in terms of information security - access parameters, including user login and password, database connection parameters, are located in the program body in clear form. The option proposed in this article allows you to reduce the risks of privacy violation when accessing the database.