A Comprehensive Study of Risk-Adaptive Access Control in Advanced Database Management Systems

Year : 2026 | Volume : 13 | Issue : 01 | Page : 19 28
By

Manas Kumar Yogi,

  1. Assistant Professor, Department of Computer Science and Engineering, Pragati Engineering College (A), Surampalem, Andhra Pradesh, India

Abstract

The current control methods for the accession of a crucial resource often struggle to provide adequate security in dynamic and complex advanced database management systems (DBMS). These static models lack the flexibility to adapt to evolving threats and contextual changes, leaving potential vulnerabilities. Risk-adaptive access control (RadAC) emerges as a sophisticated solution, integrating real-time risk assessment into authorization decisions to dynamically adjust access permissions. This review article provides a comprehensive study of RadAC in advanced DBMS, exploring its theoretical foundations, architectural components, and practical applications. We delve into the methodologies for risk quantification, the role of contextual factors, and the integration of machine learning techniques for enhanced adaptability. We have also analyzed the challenges associated with RadAC implementation, including performance overhead, complexity, and the need for transparent policy enforcement. By synthesizing recent scholarly work from the past five years, this article aims to offer a holistic understanding of RadAC, highlighting its potential to significantly enhance data security and compliance in modern database environments, while also identifying research directions and emerging trends.

Keywords: Access, advanced database management systems, attack, cyber threat, database, risk

[This article belongs to Journal of Advanced Database Management & Systems ]

How to cite this article: Manas Kumar Yogi. A Comprehensive Study of Risk-Adaptive Access Control in Advanced Database Management Systems. Journal of Advanced Database Management & Systems. 2026; 13(01):19-28.
How to cite this URL: Manas Kumar Yogi. A Comprehensive Study of Risk-Adaptive Access Control in Advanced Database Management Systems. Journal of Advanced Database Management & Systems. 2026; 13(01):19-28. Available from: https://journals.stmjournals.com/joadms/article=2026/view=241163

References

  1. Atlam HF, Azad MA, Alassafi MO, Alshdadi AA, Alenezi A. Risk-based access control model: A systematic literature review. Future Internet. 2020;12(6):103. doi: 10.3390/fi12060103.
  2. Atlam HF, Yang Y. Enhancing healthcare security: A unified RBAC and ABAC risk-aware access control approach. Future Internet. 2025;17(6):262. doi: 10.3390/fi17060262.
  3. Calvo M, Beltrán M. A model for risk-based adaptive security controls. Comput Secur. 2022;115:102612. doi: 10.1016/j.cose.2022.102612.
  4. Dohare I, Singh K, Mohan Y. Fuzzy logic-based energy-efficient trust evaluation scheme in sensor assisted Industry 4.0. In: Ahmadian A, Srivastava S, Yadav AK, Kumar V, Kumar Srivastava P, editors. Smart Materials Engineering: Data-Driven Approaches and Multiscale Modelling. Cham: Springer; 2026. p. 103-124. doi: 10.1007/978-3-032-09540-4_6.
  5. Farhadighalati N, Estrada-Jimenez LA, Nikghadam-Hojjati S, Barata J. A systematic review of access control models: Background, existing research, and challenges. IEEE Access. 2025;13:17777-17806. doi: 10.1109/ACCESS.2025.3533145.
  6. Fleming C, Kundu A, Kompella R. Uncertainty-aware, risk-adaptive access control for agentic systems using an LLM-judged TBAC model. [Preprint]. 2025. arXiv:2510.11414. doi:10.48550/arXiv.2510.11414.
  7. Hu VC. Access control on NoSQL databases. NIST Interagency/Internal Report (NISTIR) 8504. Gaithersburg (MD): National Institute of Standards and Technology; 2024 May. doi: 10.6028/NIST.IR.8504.
  8. Kumar P. Next-generation secure authentication and access control architectures: Advanced techniques for securing distributed systems in modern enterprises. Int J Comput Exp Sci Eng. 2025;11(3):4966-4995. doi: 10.22399/ijcesen.3294.
  9. Ugbaja US, Nwabekee US, Owobu WO, Abieba OA. Conceptual framework for role-based network access management to minimize unauthorized data exposure across IT environments. Int J Soc Sci Except Res. 2023;2(1):211-221. doi: 10.54660/IJSSER.2023.2.1.211-221.
  10. Pu X, Jiang R, Song Z, Liang Z, Yang L. A medical big data access control model based on smart contracts and risk in the blockchain environment. Front Public Health. 2024;12:1358184. doi: 10.3389/fpubh.2024.1358184. PubMed PMID: 38605878.
  11. Ross R, Pillitteri V, Graubart R, Bodeau D, McQuaid R. Developing cyber-resilient systems: A systems security engineering approach. NIST Special Publication 800-160, Volume 2, Revision 1. Gaithersburg (MD): National Institute of Standards and Technology; 2021 Dec. doi: 10.6028/NIST.SP.800-160v2r1.
  12. Saura JR, Škare V, Dosen DO. Is AI-based digital marketing ethical? Assessing a new data privacy paradox. J Innov Knowl. 2024;9(4):100597. doi: 10.1016/j.jik.2024.100597.
  13. Sifaoui A, Eastin MS, Wilcox GB, Doorey AM. The dark side of consumer privacy in the age of artificial intelligence. In: Scheinbaum AC, editor. The Darker Side of Social Media: Consumer Psychology and Mental Health. 2nd ed. New York: Routledge; 2024. p. 157-178. doi: 10.4324/9781003410058-11.
  14. Soni V. AI and the personalization-privacy paradox: Balancing customized marketing with consumer data protection. Int J Comput Trends Technol. 2024;72(9):24-31. doi: 10.14445/22312803/IJCTT-V72I9P105.
  15. Aljuaid TAYM, Wahab AWA, Idris MYII. Adaptable and dynamic access control decision-enforcement approach based on multilayer hybrid deep learning techniques in BYOD environment. Comput Mater Continua. 2024;80(3):4663-4686. doi: 10.32604/cmc.2024.055287.
  16. Wang R, Li C, Zhang K, Tu B. Zero-trust based dynamic access control for cloud computing. Cybersecurity. 2025;8(1):12. doi: 10.1186/s42400-024-00320-x.
  17. Vishwakarma RK, Pandey A, Kundnani P, Yadav AK, Singh N, Yadav S. Personalization vs. privacy: Marketing strategies in the digital age. J Mark Soc Res. 2025;2(5):177-191. doi: 10.61336/jmsr/25-05-20.
  18. Ying S, Huang Y, Qian L, Song J. Privacy paradox for location tracking in mobile social networking apps: The perspectives of behavioral reasoning and regulatory focus. Technol Forecast Soc Change. 2023;190:122412. doi: 10.1016/j.techfore.2023.122412.
  19. Zahedi SM, Fan S, Lee BC. Managing heterogeneous datacenters with tokens. ACM Trans Archit Code Optim. 2018;15(2):1-23. doi: 10.1145/3191821.
  20. Ziv T, Whiteman JD, Sommerville JA. Toddlers’ interventions toward fair and unfair individuals. Cognition. 2021;214:104781. doi: 10.1016/j.cognition.2021.104781. PubMed PMID: 34051419.
Regular Issue Subscription Review Article
Volume 13
Issue 01
Received 16/01/2026
Accepted 29/01/2026
Published 28/04/2026
Publication Time 102 Days

Login

My IP

PlumX Metrics