MongoDB Security Features document provides an overview of MongoDB's security features including authentication using SCRAM or X.509, role-based authorization, TLS/SSL encryption, auditing, and client-side field level encryption. The document compares MongoDB to RDBMS and outlines where MongoDB excels including for web applications, semi-structured content management, and high-speed logging and analytics. It also lists practical tasks for implementing authentication, access control, and SSL/TLS in MongoDB and references additional MongoDB security resources.

1. MongoDB Security Features
Database Security Presentation
Presented by:
Mahdi Dousti
Fatemeh Kamani
Instructor:
Dr. Sadegh Dorri Nogoorani
Fall Semester 2021

2. What is
MongoDB?
• NoSQL
• Open-source
• Document-oriented
• High-Performance
• Scalable
• Built for Speed
• Suitable for high volume data storage

3. MongoDB
Features
Indexing
Replication
Duplication of data
Load balancing
Provides high performance
Stores files of any size easily

4. Click to add text
Click to add text
MongoDB Example

5. Difference between MongoDB & RDBMS
RDBMS MongoDB
Table Collection
Row Document
Column Field
Joins Embedding and Linking documents

6. What is MongoDB
great for? RDBMS
replacement
for Web
Applications.
Semi-
structured
Content
Management.
Real-time
Analytics &
High-Speed
Logging.
Caching and
High
Scalability

7. Not great for?
• Highly Transactional Applications.
• Problems requiring SQL.

8. MongoDB
Security Features
• Authentication:
• SCRAM
• X.509
• Authorization :
• Role-Based Access Control
• TLS/SSL
• Enterprise Only:
• Kerberos Authentication
• LDAP Proxy Authentication
• Encryption at Rest
• Auditing
• Client-Side Field Level Encryption

9. Authentication
authentication auditing encryption
authorization
MongoDB
storage
administrators
clients
Which
user/apps accessing
the DB
Which
nodes are joining the
cluster
Which user are
accessing the DB

10. Authorization
authentication auditing encryption
authorization
MongoDB
storage
administrators
clients What permissions
dose an app have?
What data can an
admin see?
What permissions
dose an admin
have?
What data can a user
see?

11. Auditing
authentication auditing encryption
authorization
MongoDB
storage
administrators
clients Who made which
changes and when?
Who made which
changes and when?

12. Encryption
authentication auditing encryption
authorization
MongoDB
storage
administrators
clients SSL encryption SSL encryption
Full
system encryption

13. List of Practical Tasks
Authentication
using scram
Access
Control
SSLTLS

14. References:
• Security Checklist — MongoDB Manual
• The 6 Aspects You Must Secure On Your MongoDB Instances | Jscrambler Blog
• The essential guide to MongoDB security | InfoWorld
• MongoDB Security: Best Practices to Keep Your Data Safe | DigitalOcean