MongoDB Security Features document provides an overview of MongoDB's security features including authentication using SCRAM and X.509, authorization using role-based access control, TLS/SSL encryption, auditing, and encryption at rest. The document compares MongoDB to RDBMS and outlines where MongoDB excells including being a replacement for RDBMS in web applications, semi-structured content management, and high-speed logging and analytics. It also notes areas MongoDB is not as well suited for including highly transactional applications and problems requiring SQL.

1. MongoDB Security Features
Database Security Presentation
Presented by:
Mahdi Dousti
Fatemeh Kamani
Instructor:
Dr. Sadegh Dorri Nogoorani
Fall Semester 2021

2. What is
MongoDB?
• NoSQL
• Open-source
• Document-oriented
• High-Performance
• Scalable
• Built for Speed
• Suitable for high volume data storage

3. MongoDB
Features
Indexing
Replication
Duplication of data
Load balancing
Provides high performance
Stores files of any size easily

4. Click to add text
Click to add text
MongoDB Example

5. Difference between MongoDB & RDBMS
RDBMS MongoDB
Table Collection
Row Document
Column Field
Joins Embedding and Linking documents

6. What is MongoDB
great for? RDBMS
replacement
for Web
Applications.
Semi-
structured
Content
Management.
Real-time
Analytics &
High-Speed
Logging.
Caching and
High
Scalability

7. Not great for?
• Highly Transactional Applications.
• Problems requiring SQL.

8. MongoDB
Security Features
• Authentication:
• SCRAM
• X.509
• Authorization :
• Role-Based Access Control
• TLS/SSL
• Enterprise Only:
• Kerberos Authentication
• LDAP Proxy Authentication
• Encryption at Rest
• Auditing
• Client-Side Field Level Encryption

9. Authentication
authentication auditing encryption
authorization
MongoDB
storage
administrators
clients
Which
user/apps accessin
g the DB
Which
nodes are joining
the cluster
Which user are
accessing the DB

10. Authorization
authentication auditing encryption
authorization
MongoDB
storage
administrators
clients What permissions
dose an app have?
What data can an
admin see?
What permissions
dose an admin
have?
What data can a
user see?

11. Auditing
authentication auditing encryption
authorization
MongoDB
storage
administrators
clients Who made which
changes and
when?
Who made which
changes and
when?

12. Encryption
authentication auditing encryption
authorization
MongoDB
storage
administrators
clients SSL encryption SSL encryption
Full
system encryption

13. List of Practical Tasks
Authentication
using scram
Access
Control
Role-based
Access control

14. References:
• Security Checklist — MongoDB Manual
• The 6 Aspects You Must Secure On Your MongoDB Instances | Jscrambler Blog
• The essential guide to MongoDB security | InfoWorld
• MongoDB Security: Best Practices to Keep Your Data Safe | DigitalOcean