ChapterPDF Available

NoSQL security: can my data-driven decision-making be affected from outside?

  • December 2021
  • In book: Big data & decision-making: how big data is relevant across fields and domains
  • Edition: Emerald Studies in Politics and Technology
  • Chapter: 4
  • Publisher: Emerald
Authors:
Anastasija Nikiforova at University of Tartu
Anastasija Nikiforova
Artjoms Daskevics at University of Latvia
Artjoms Daskevics
Otmane Azeroual at Deutsches Zentrum für Hochschul- und Wissenschaftsforschung GmbH
Otmane Azeroual
Download full-text PDF
Read full-text
Download citation

Abstract

Nowadays, there are billions interconnected devices forming Cyber-Physical Systems, Internet of Things (IoT) and Industrial Internet of Things (IIoT) ecosystems. With an increasing number of devices and systems in use, amount and the value of data, the risks of security breaches increase. One of these risks is posed by open data sources, by which are meant databases, which are not properly protected. These poorly protected databases are accessible to external actors, which poses a serious risk to the data holder and the results of data-related activities such as analysis, forecasting, monitoring, decision-making, policy development, and the whole contemporary society. This chapter aims at examining the state of the security of open data databases representing both relational databases and NoSQL, with a particular focus on a later category.
Content uploaded by Anastasija Nikiforova
Author content
All content in this area was uploaded by Anastasija Nikiforova on May 04, 2022
Content may be subject to copyright.
This Chapter has been submitted and accepted for publishing in «Big data & decision-making: how big data is
relevant across fields and domains» (Publisher: Emerald) and this is a preprint version of the Chapter.
Please cite this paper as:
Nikiforova A., Daskevics A., Otmane A., "NoSQL security: can my data-driven decision-making be affected
from outside?," In Big data & decision-making: how big data is relevant across fields and domains, Emerald
Studies in Politics and Technology,2022.NoSQL security: can my data-driven decision-making be affected from
outside?

 !"#$%&
1
 !"#$%! &'()*+*,+*,-
&%./%/%
3  0  '  /%.    01*  '  0
artjoms.daskevics@gmail.com
42   34 . '4 .  . 5(6378
49:;<"=/%2:%$.:4>! &'()*+*++*
,?
'(##)*
 45@4(!!8>44%.
.>4%.A%.
    !  B% .%    3  .  .:!  4     
        5   8 
&%. CDC"'E.(F%G
4   (%H     4%   .  I   4 0  %  
!
# $%    4 . #   4 2  
34.'4..5(6378.4(%
/J(4"%.58!3..
4@4!(!&K2 E.B.
I4L%..B..L%%%!
  !     L      .        0  C%  
!  3 4%.    B4%  .        >4  4  B4%  4
..4.B.%..! !
 >.  4    B%%  .  .    B*@4 %
     4 58 . .%  458 ! 74 
B  . .   .4%  .4  
B4!&4 .B.B>44
.B>44%.!4%..BB%
I% >44     4 . 4%. . 4 % .*%.
4%.* %.%.4
This Chapter has been submitted and accepted for publishing in «Big data & decision-making: how big data is
relevant across fields and domains» (Publisher: Emerald) and this is a preprint version of the Chapter.
Please cite this paper as:
Nikiforova A., Daskevics A., Otmane A., "NoSQL security: can my data-driven decision-making be affected
from outside?," In Big data & decision-making: how big data is relevant across fields and domains, Emerald
Studies in Politics and Technology,2022.NoSQL security: can my data-driven decision-making be affected from
outside?
>4%!44I44.
.B  B4 %% .B . F0 >4  %    %
!
M>.).B F0 %B%&/(B . 
5448444
(+
.>444%%.N.*%%%.>.%
>4*.%O4..%
BB4.B%51:J0+8!4BB4.*
...! 34   B.!4 . %% B
.4B.*.* 5%!+-8!4%%4
 4 &1(*.   %% .*.
    P    .%  .  .    .  L%*  4*  *
%%!444.4B.
 .>B45%!++8B
.* .%.%>%%  4>4%  !44
B4. . . %>44  4.  .L. . N 4
%4.>44.%. %%
% ..! . 4  .. %4%%
%!
4B4.B.4...%
  B44 . *4!% F0 .B
H .  B > % . . . >44 %.   B4 . .
%  52%  %! ++Q  %!+Q (B  %! +<Q 4L:.4  %! +Q
( %! ++8!3>4%% 2%.":4
B...%.B 4%.%%. *%
54%!+<Q(.%!+=8!
" . 4 %K !! .    4    . B  .  O
.B  >44      %  .  4  4    %B%  .  B%  
I%   .  4 :!  "%44      B    4  B    4
.B!4.BL>44B%
%%.B4%.44%B%4.>4
L..%4..!%%A
)  4>    L.    >44   .B    B%  .    B%  .  4
:R  74      B 4.    R  ".  >44    
4  ..    4 %B% 4 %.  % L  4
.B  R "%44  A  B %  >. B   
1%B%  .  I  518  (%  .  4    :  %B%  .
4.N4B%!4
%.B4>!
4B#44.44.N.B>4
This Chapter has been submitted and accepted for publishing in «Big data & decision-making: how big data is
relevant across fields and domains» (Publisher: Emerald) and this is a preprint version of the Chapter.
Please cite this paper as:
Nikiforova A., Daskevics A., Otmane A., "NoSQL security: can my data-driven decision-making be affected
from outside?," In Big data & decision-making: how big data is relevant across fields and domains, Emerald
Studies in Politics and Technology,2022.NoSQL security: can my data-driven decision-making be affected from
outside?
    F0 .B! C 4   4  >%% B . B .
4.% B%*>%.I%58!>%%.
B>4 4.% . 4 .B !
>%%.44A.4...4%%
4.!>%%B4%.4..
%!  >%%   4   >%. B 4    F0
.B!44444*58% >
4  4  *  5*8  B.  %  %%. 4/1&(( >44  4  B  %
.%.>%%B.1!1>%%4%B.B%
4/1&((4.%!44.4
4.B.%BK% 4.B..>44
B.44%.B.4>%%B..!
!%
4 .B  4 4 B % % .%
..-!%5M %!+8!74 4  4
...B%%F0.B.B
4 I    /  (    .     4  %    .B        >%%!
%F0.B%4:.B> >44%.
.% 5C%!++8!0. .4!!.
I%.% !
".4**.%#B4%.B%
.2.5%++8%B.% ...B!
0S% 4B44.4%)
! 6&&E. B4.++ %.4%B%
S.. >BQ
+! T4.B4+=%%>.4 , B%%!4
. 4U>.  %I . ..B
>%!T4%.B44Q
,! ".4.B4+ %. 4%   4B%% .
:S%.4>%.S%B.B>44
%. B4. %%. . 4A +*..
B.B .%Q
-! 0 ..B4 ++>4= %%0 . S. >B4
%. >B!4IN.+V4%!!=<%%Q
! >.  5EK8  .  B4    +  >4  I%    %%  4%
S.>%>44K 4..4>.
+-..4HEKA.>.+<!
744.>.%+Q
<! >K.B4+.,,%%>.I.%%
 %%>.%B%4%> !
=! B.B4+<.%=%%B.<
.I.!
4.% %.B44>A%.4>.>
I.4%%.%>44(....B .%!
3>4..4L%%% 4.
This Chapter has been submitted and accepted for publishing in «Big data & decision-making: how big data is
relevant across fields and domains» (Publisher: Emerald) and this is a preprint version of the Chapter.
Please cite this paper as:
Nikiforova A., Daskevics A., Otmane A., "NoSQL security: can my data-driven decision-making be affected
from outside?," In Big data & decision-making: how big data is relevant across fields and domains, Emerald
Studies in Politics and Technology,2022.NoSQL security: can my data-driven decision-making be affected from
outside?
% !4BL%.W%4%5%444.
B B%4.8! .%  L%%    4  % N 4 
....%4.N .%!!4
N. % .  %.   %  B4 % X   . !  ..
%44I%S.% 4B.4%4
%%X.4K ...4. 
K >%%!
@44   .B  4   E(/ >4 -  .B
BB%4+4%..% +!-%%%.
.  5(  %! +8! ". /: 5++8     . 
X.E(/4 >4..%
  % 4 4  %  % . .   >  2(@'
%!4   ++  4 ++     > %H 4 I.  E(/
.B!!%-=V%%E(/.B4B%%!
"%.%B.>44E(/.B. 4
.4.BB%45A% D4>> RG
.D>44%RG>%%B>.B%8!'L.4>. 4 4
%O4.O%4N.E(/>4%4%
O/.O.+,!3>%444%%..
E(/4%%B%%B%.B!".4.
%. %  4% . % %4%.44%%B%
%%>.B.5@.+Q%++QC%!++8!
3>4%.B >%..44B.4
%44 4  B%! ..%44 4 %>  %%
F0.B>.%..B.4F0.BS4%..
4.% !.4>%%B..4%!E
4E(/  4%F0 .B  44 E(/ >%% B. 
4F0. F0.B!4>%%B. %B.4 B
.4.B.%%!4%I% 4%
.44.!

0  >. B >>4 4B4 4. % . 
4.B%F0.B!  4
4I.I.B..4> 44
4.B.L.  4 % D4G B >444:.4 !
@4  4    %   4      1%B%  .  I 518  (%  51
(%+++8!..I.%B%..4
,  %. (%   5(8 . I F0 # 3@ 
%P22@%'C.C%%!3>%444
%B%.%441%(/.1(O%1%B%
(B4  4  .% . .  .    4 %
.B !! >44 4.B  B% . B . . 4
:!4..%4%.B 4%.B.>4
4!/44B%B.%..B*
L.4B%..B414
*!
This Chapter has been submitted and accepted for publishing in «Big data & decision-making: how big data is
relevant across fields and domains» (Publisher: Emerald) and this is a preprint version of the Chapter.
Please cite this paper as:
Nikiforova A., Daskevics A., Otmane A., "NoSQL security: can my data-driven decision-making be affected
from outside?," In Big data & decision-making: how big data is relevant across fields and domains, Emerald
Studies in Politics and Technology,2022.NoSQL security: can my data-driven decision-making be affected from
outside?
C4%2%%!5++8>44..%
*%.%4IF0.BK*B.4
.>44  >.%D*B4G ! 4 4 
4D*B4KG!2%%!4..<K)
%,+ 4>4>4%
>4  4    .  .L    F0  A    4      .      .  
.B  4 .   >B %! E% A %%>  
%4B *..BB....%.!4B
.B4#K . K !C#K 44
% >58% #..% 5B8
A .  B 4 . I . 58 Y #
>44 %%>. IY  %I  5.8*B .
A  4  DI%      4      AS %
4G..%A4%.58%4
 3@ '"@ .B 4.! .K   
D4A4.GQ
%+-+>44>4B*.L.
  4  B    4 A    .  4  4    %      .
! 4    4 B I  %I A %   %%
!!..A.B%4E'..
.4%%>*.4..%4
!4>.4.%X%..4
.BQ
./++4>4F0.B.>.
 4   %.   4 B%! "  I%
E(/.'...4B.%%%>.
     4 !         %.    D  ..%  >4 %  
   4 G >44  %.  K  4  A. .
4# Q
%>444 D%%   . .
   G!   %% . B  .N    >4 
   % B.  4 % . B%! F0.B .
.N%%%>44%%B...58%*B.
.5B8.*B.Q
%%+4 4.4% 
444%Q
%%4 >  D.  G 4.
4B%I%K !
".  44S I >  4 . %B% .   >
.L.  4  >.. 4  F0 .B 5E(/  4(/ '.
" .3B-#&(/8>4> 4.B4
L4.!"4.5C%!++8.4
4 % F0 .B   L % 4  %. 
.B%!44.%.% 4 %%@B
.I. >%% %!4%4>.4
!V@..44%..BL.!4 .
>4 4I.  .% 4L4S
This Chapter has been submitted and accepted for publishing in «Big data & decision-making: how big data is
relevant across fields and domains» (Publisher: Emerald) and this is a preprint version of the Chapter.
Please cite this paper as:
Nikiforova A., Daskevics A., Otmane A., "NoSQL security: can my data-driven decision-making be affected
from outside?," In Big data & decision-making: how big data is relevant across fields and domains, Emerald
Studies in Politics and Technology,2022.NoSQL security: can my data-driven decision-making be affected from
outside?
    %     .  .    %B%  .B  >44     
L44>B!
%444K L%4
%. 44  F0.B  %% % .  
%..%444:
54L:.4    %!  +Q  /.   %!  +8  .  .  !  4  .   4 D
.BG!"%.B44%4 >.% 
4% .B53B+++8!
0//,1/%
44..4A4 4%%
4.B!4%%B%..X.B!
>%% 4.44!!4%%.B.
4 ! "  4 4   4      4  %
4K 4#'C5*'A
C8 '%!.5'%!+<8!4.4>4%4>
A %.F0#4A%F0.B
 #!   B4 . . %  4 4 .  (
"%5("8..%L.# %B%
..%>%%>.!44("4%.B.B%.
%B% . %%>  BK ..  4   4   . 4 . 
!"%444.%%>4 %%%. 4.4
4 44%4 4     4 4 .  % 
.%.4  ..K 4.%>4!3>4
 4 D..G 4A >44 H .  4  .  & 7B
"%@#5&7"@8>44%%I%L.4
4&7"@%!!4H>5&7"@C.+,8!
C  44 % .I .      4 B
.1(%!1(%.. %.B4B.
4>  4  B    .B  .  B      %.!  E  %    %
.B4 E4.%44:.B44B%B%
. %       . B ! 4   4 B . 
% B     >%%  B %B%!   % % 1( O
%  1%B%  (B O  4  !!     4  %.  .B  
4 %*%.H> Z> L. 
. !/>B*.444
.  %!  4  .      4  % .B    *%.
444.B!44A>444.BB%
.B..4:4%.B>.B.B4%.!
34B%..double blind tesng 5%%%..B%B%.8
%! ..  B4 B#4.!
4B#.B4B>  >444N
4%>4%4I%>4 >%.4
. L! /%.   A L%   !! %  L.
B.5( . ++8!4%%
% .4%X4B.B44
.4  >4 4 B. B 4%  4
I%.5'.4%!++8!"%.B.4
.  I 4.K >4% I% . . .
4%% >%.B.B 5%!++8!
This Chapter has been submitted and accepted for publishing in «Big data & decision-making: how big data is
relevant across fields and domains» (Publisher: Emerald) and this is a preprint version of the Chapter.
Please cite this paper as:
Nikiforova A., Daskevics A., Otmane A., "NoSQL security: can my data-driven decision-making be affected
from outside?," In Big data & decision-making: how big data is relevant across fields and domains, Emerald
Studies in Politics and Technology,2022.NoSQL security: can my data-driven decision-making be affected from
outside?
(44I%.I. B4
 B%  %  4 ! @4 4  %B%   4  
%B%5/%! +=8!.B%B%.4
%    4%.  .  *    %  4    >44  
%.B%!
34&%%5&8.44
58   >44    %  .    %%  .  %  B%%  %B% . 
5E%++8!4% B4 
 %.B%.4..B5%.% .
.B5/.%!++88!C4!!BB%>%..4>
  4  *.  .  54    >B    .B  .%  
4.>!8 4% >44 458!4
B..N%%!!58%%%:
..%5+84>4%%444B.!
  B % 4. % .L  >44.
>44I4%%>%.*%K K!44>
 B .  . 4 %%  4  K  .  %%
44%.44.
..SB%.K ..%%.4
>4%     . 4 .  4 . 4 4 B%! 4 I
4%>44%%>4...BB
.%4%H.>!
/*/(*/%+%%1
44*B.%%%.4.*./.*B.%B%
.  . % 54/1&((8 > %% .  5(  .
 ++++B8!4>%%B.B..%%B!
4/1&((%*.%B%.>44B.
4  &  %% 5&8 % % 44   4
 4 5% >44 8 O 4. . /
.!/4 .. B  4% .  E4
05E08.B4AA.%B%.!
4% 4%44 4. %4%.N! 4 %
. >444.44.B*
44 %%IBK% >  >44 4 K >%.  
%%.BI.!
4/1&((..4..B%%4%4
.L.  .    *  E(/  '.  %4  4(/  .  .
E4.EF0@F0!4  B...>)F0.
F0>4%F0 B...44) *%.*..
%*.  .B!  4/1&((    .    B%%  %B%  
4K)XX4B!X:44X&*(B>44%%>B4.%
4%%.4>4..%!
4%%%...4)58@..4548
>444%/..4.%BL.@...
.L.A % .% . B4   4 >  .
4%%% .%.O .%.5+8 @
.. 4 .    % . @ .. .  4
..    4      4    5,8          @  ..
58 >44     4 . 5  B%8  4  .B  >44   4
This Chapter has been submitted and accepted for publishing in «Big data & decision-making: how big data is
relevant across fields and domains» (Publisher: Emerald) and this is a preprint version of the Chapter.
Please cite this paper as:
Nikiforova A., Daskevics A., Otmane A., "NoSQL security: can my data-driven decision-making be affected
from outside?," In Big data & decision-making: how big data is relevant across fields and domains, Emerald
Studies in Politics and Technology,2022.NoSQL security: can my data-driven decision-making be affected from
outside?
.!4B%%.4%*B*OA%%!
4.4.4%L.B>444I 4.4.
4%%4%!3%..<4D%G4
. 4.  .! ".  4 %L 4 .  B 4. ) 58 4
.B %.4.5+84.B4.B
  5,8  4  .     B  4    .    * .  5-8  4
..4.58..B!
>%4%%4%.%..B4B
..B!744E(/>%%B4%*B*.R".>44F0
.B>%%BL%%%B%.F0.BR
2%.//
.>4( . 5++84%B.*
%%. DG .B>44 %B%  I%   % 4 +V  4 .
.5%4%4@..4B%.8!4
44+,@..!3>4.4
   : >44  B .4 K B%
B.!74+V.L..4%.B.!
4 %     .%. % B 4 .B . D%G  . >44 
B%58!
B% .%%.B*>4 4 % >4458
4/1&(( 4.5+8 4.B4.B
>    5,8 4  .      B  4    .    *
5-84..4.58..B
.! 4 L !! D.  G . 4 % 4    4
.%>44 %..K ..
B.4%.B.%!
4>44(/>4%.B>444/1&((4.
'=.B>...B%ID%G
%%4B.!
)%34%%
E(/ '. 4(/ E4. %
4
. EF0 @
F0
Managed
to connect
[ [ * [ [ [ [ [
Failed to
gather
data
* [X* * * [X* * [X* *
DB is
empty
* [ * [ [ [ * *
System
data or
non-
5* * 5 5 5 5 5
This Chapter has been submitted and accepted for publishing in «Big data & decision-making: how big data is
relevant across fields and domains» (Publisher: Emerald) and this is a preprint version of the Chapter.
Please cite this paper as:
Nikiforova A., Daskevics A., Otmane A., "NoSQL security: can my data-driven decision-making be affected
from outside?," In Big data & decision-making: how big data is relevant across fields and domains, Emerald
Studies in Politics and Technology,2022.NoSQL security: can my data-driven decision-making be affected from
outside?
sensive
Sensive
data
5 5 *5 5 * * *
Compromi
sed DB
5* * 5 5 *5 5
)4
3>4 B% .  % %  4   B 
.B  %%        4   4  4  .  A  .!  
...%%>.>%4%%4B4
 !! F0   F0! "%44   B  4 F0 .B ..   B
.. .%.B..4A.B4
%>%%.44%B%F0.B!
B%+4> .%%  B.B
%%  %  %.  4 % B  .B  .! 4 
%.>44.B%%D%.G!!4B
BB%%%>44..!'.B4%.%%>
 . 4 % B  % ..  4  B  %    .B
B%4%.A%B.B.!3> %%
N4!44%B.@....B4
%..!
)% 3++%
E(/ '. E4. %4 . EF0
Total found 177 122 116 86 7 1347
Connecon
successful
=!V !
V
678 778 -V !-V
Compromise
d DB
98 +!+V 98  !,V
Sensive data =!V 6"8 &8 V  
Failed to
gather data
=V ,!V +V +V
)45%..5( . ++88
E4..%4 4.>444/1&((4.
 !    B      4/1&((  >  B%        %%   %4
.VE4..B!".44.'..
B%..,VB%B.!
%%>.B E4. >4 4> 4 B  .B >44  .
%.  B 4.    L%  %>  !!  +-V!  .!  EF0  .. 4  B
This Chapter has been submitted and accepted for publishing in «Big data & decision-making: how big data is
relevant across fields and domains» (Publisher: Emerald) and this is a preprint version of the Chapter.
Please cite this paper as:
Nikiforova A., Daskevics A., Otmane A., "NoSQL security: can my data-driven decision-making be affected
from outside?," In Big data & decision-making: how big data is relevant across fields and domains, Emerald
Studies in Politics and Technology,2022.NoSQL security: can my data-driven decision-making be affected from
outside?
%.4>B%4.4!
3>  . 4 compromised databases 4 4 % .N . 4 %  %
>4.4B.'...>4%4
E(/=V.B>%.. >44%>4B.
L. .   %  4 .! 3>  4 I.  4 4 
%4B..B@F0>44B%F0.B!4
I %  4   4> B EF0 5,,V8 >44  %  F0 .B .
%45+=V8!   . .B > % .  E4. 4>
4BL%%>.4B.!
".   4 4  %  D has managed to connect by gathering
system data or non-sensive informaonG5-V8.Dhas managed to connect, but the database
is emptyG5+V8!3>V..%4..4%.B.B
K !.B+V44B%..!
   E(/  4:. B  44 B   >4 .B 
.5,!,V8>4%...4
>44%.44.B5-!+V8..B
>44.*.B4.>44%>45/.%!++8.
5( +8! 3> .  %  .N .  4 . 
4:.B4%>%% % .B. 
L%BK!"%44 @F0%F0.B %% B4:.
B . .B . 4 I  % H E(/4>
4    F0  .B!    ..  @F0    B  4:.  B  
.B>44*..B4.!
444B.>444D%G4..>E4.
.  %4!  4  %  I   %%    %  4>  B  E(/  
..B.'.B%.!EF0B..
*B*.    .B>%.
4 %.! 3>  4  4 > .B  >44 * 
. B4. >4  > .B>44  .  B
4....B!
".4..B.44>44%%B
.L.%B%>44B..DG.4.!
/.4(/4DGB4/1&((>B%  
 @ ..! "%44 4  D%B%G .B .  1 (% EF0
*4%B%  % +V>44   %  4 .  B.!
3>444B4%%B%4 B.L.%4
5,,!,V8>44 %%>4%>44 .%%@
...4.%%%!
4%.%B.4%4%.B% .4%%*B%
4 .   .!        4  4%.  %  B  I%.  B  4  .B
4%.S >  . ! 4 %. B 4  %  %
.  B  EF0  >44  . 4  1  (%!    4  >.  4  EF0    
4:..B>44.I%.4*%.
4 4%.  A   4 ! &4> .B>4
>   *B% 4 % %B %B%!74  .
This Chapter has been submitted and accepted for publishing in «Big data & decision-making: how big data is
relevant across fields and domains» (Publisher: Emerald) and this is a preprint version of the Chapter.
Please cite this paper as:
Nikiforova A., Daskevics A., Otmane A., "NoSQL security: can my data-driven decision-making be affected
from outside?," In Big data & decision-making: how big data is relevant across fields and domains, Emerald
Studies in Politics and Technology,2022.NoSQL security: can my data-driven decision-making be affected from
outside?
.4444'.E4.>4%
E(/  .  %4  .    4  4 B%.  B  .%!  EF0  4(/  .
.      A  4  .      4>  BK  %  >4
4/1&(( .! 4   B% 4 4 .B
44 4%. L .  4    
.%  !4. 4 F0.B 4%. B..
B4>4%%5+84:.4> 4B>
B...4%.B....%4
4%.B..!
!(:;(#!:#:;(#
...%>%%4BB*@4%
5@84..%458%5&%+++8
. .% 4   .! 4 . . B
.%.*..*  %:
 P.%* .%%
B4.B%>%%4>4%!
4A4.%!3>>4%
4 .  .  % 4  . W  .  
44>4.4B%>44.%X%.B
5(4%!+Q1:J0+8B4.!
3>>4..4.B4%.%B 
..  B% .! % 4  
%*%. ..!.>4
4%B..B.44%.B..%%
%%) . %% 58  %% 5..%8 .  %% 5.8  . .! 4
          4  .B            4
%B!%.4NB
4%% .B.% X.%>4%%
. % A!4 B .B  %*.A >44
>%.  I%  >4  ..%    4      ..    .B      
.4%4!%444%.B
%4 B44.
4  .4 ..4 4 .%!.
4%B .   . %. ! "%
...4A.% B.  / ( 5":% .
CB++8E405":%. +++88.B.%.4%
5(08 . B% 4 5"B.%%4  %! +++8  % ! 4 4%. B %
I..%..%.%%..
4BB%.4.!
EB44.B4%>444%.B 
!".B1:5++8%.4++>B%.%
>4%N.B.%%>.B. %B%4
58.B58!K4%4>%
B>B%K   %%  %  % .
%    .%    !  4    4  4            %*.%
A>44 A 4  *B*. .B  
This Chapter has been submitted and accepted for publishing in «Big data & decision-making: how big data is
relevant across fields and domains» (Publisher: Emerald) and this is a preprint version of the Chapter.
Please cite this paper as:
Nikiforova A., Daskevics A., Otmane A., "NoSQL security: can my data-driven decision-making be affected
from outside?," In Big data & decision-making: how big data is relevant across fields and domains, Emerald
Studies in Politics and Technology,2022.NoSQL security: can my data-driven decision-making be affected from
outside?
BB%  4LAB  .!  4 4.B
    %>  4      4      ..   4  .  
.%!
4  4   . .  % %%  4 I  4
>.. .BB%.4:>444  4.
4%.!4.BB.BI%>4%4.BB4.
.%.%.4.B!44.B
%4BB4. 44./.!3>
4    %  B  .      !    4  4      4  %  4  B
.!  %%>  4 .L. .   B4 F0  .F0
.B!
"%44.%B.B.W%.4
  4%%  4 ! C 4 DG  > 4(/ 4
...%4I4F0.B.EF0
%% .B! 3>   4 .% .    '.   E4. ..%
  4  .X      4%.  B  ..     4!      B
..  4>  4  4  %    B B.% .. >4 .  4
  4  .  % % B . 4>   . 
4%.>.B44.%.
%44%%B%*4!
C4DG%44:.B> .%A%
.4!4 44.B 4%. 4%. B > 
!%%B.>E4.5%44 .1(%8
>4 4 % B  %B% . > 4 44! 3> 4   4
%B%>%>.%4B.41(%4
.4D%>*%%G> 4.L.4!34
 *.4 %  >4 1 (%   %B% . 4 I%  4
%>4%%.B.!
2*<*2*:*
1. "B.%%4! "4. Y! M4 E!E! et al. 5+++8! @'( %)  *>
> 4%4.4&"%! Complex Intell. Syst.
4K)XX.!X!=X-=-=*+*<*
2. ":%  &  CB  '!  @  /  (  >4  "4  3.    4  
4%%      &1(*! Big Data and Cognive Compung!  ++Q  58)+!
4K)XX.!X!,,XB.+
3. ":%& "!"4 .E0%B*/.(
3>4/(4%4(!Informaon!+++Q,5+8)!
4K)XX.!X!,,X,+
-! /.E!@!5++8"I%4B.4.!
++ 7th Internaonal Conference on Internet of Things: Systems, Management and
Security (IOTSMS) 5!*8!(B++
5. /: "! 5++8! Bad Actors Target MongoDB Databases, Threatening to Contact GDPR
Legislators Unless Ransom is Paid!  "%B%  )
4K)XX>>>!B..!XB%X4\XB.** *.B*
.B*4***.*%%*%***.  5".  +
(B++8
<! 4C!(Y!24>!347!!7%%4(!"!/>E!4.!
C "!J2B'! !5+<8!/B%).B.   .
This Chapter has been submitted and accepted for publishing in «Big data & decision-making: how big data is
relevant across fields and domains» (Publisher: Emerald) and this is a preprint version of the Chapter.
Please cite this paper as:
Nikiforova A., Daskevics A., Otmane A., "NoSQL security: can my data-driven decision-making be affected
from outside?," In Big data & decision-making: how big data is relevant across fields and domains, Emerald
Studies in Politics and Technology,2022.NoSQL security: can my data-driven decision-making be affected from
outside?
.! In Proceedings of the 7th USENIX Symposium on Operang Systems Design and
Implementaon, 1%=?"/ %""&(U<O!
=! "!.:C!C!@'!!JM% Y!0!5++8!/.%%
L4.)>%!Journal of ambient intelligence
and humanized compung1258<,*!
!  /!E3! J4 &/! 5+-8/.) 4.   .B
Naonal Science Review58+=O,!
9. 1(%!"%B%)4K)XX>>>!.%!X5".+Y+++8
! //!M%%(!/4!E!BY!0E!!!!24@!5+=8
>%!O'Reilly Media, Inc.+=!
! (  "! J  "!5++ B8! 4/1&(() 4. ./
.  B.  %B%    .    .  %    >4      4
4 >B! In 2021 Second Internaonal Conference on Intelligent
Data Science Technologies and Applicaons 5("85!,*-8!!
+! ( "!  5++B8! *B. .B%B%
4  /% )  4/1&((    ! In 8th Internaonal Conference on
Internet of Things: Systems, Management and Security (IOTSMS) 58
13. 1:  5++8 Data Breach Invesgaons Report "%B%  )
4K)XX>>>!:!XBXXX.BX  5".  = Y
+++8
-! (4 ! 4 > !M! 4 E! et al.5+8!  /  .    4%4)
%.!J Big Data=-!
15. (Y!5++8 Telemedicine vendor breaches the data of 2.4 million paents in Mexico!
"%B%  ) 4K)XX>>>!4%4>!X>X%.*.*
B4*.*+-*%%**I5".+(B++8
<! (. 2! 3 (! Y E! M % 2! 0 4 "! @%4 "!
B!14%%@!J1%7!5+=8!():U44%%B%
*% ! In Proceedings of twenty-;rst ACM SIGOPS symposium on Operang
systems principles, "E>T T"&@U=+O++!
=! (B  @! (% ! 2. ! J 4 ! 5+<8!  .   
E'.%.)"!Computer science review+*+!
! C(!E!@%E!J6!5++(B8!F0/ .>)
" 0*% "%  EL. F0 !   Annual Computer Security
Applicaons Conference 5!<=*8!
! 2%M! J 3."! 3!5++8! @*/4@K F0(B!
IEEE Access,++*,+,!
20. 3B5+++8How to Discover MongoDB and Elascsearch Open Databases"%B%
)4K)XX4B!XXX--,,+X5".+Y+++8
+! M  !  >  @!  J  6B%  E!  5+8!       4      %
44%4)>!J Big Data<
22. E%5++8 What is Open Source Intelligence (OSINT) & How to Conduct
OSINT Invesgaons in Maltego  "%B%  )
4K)XX>>>!%!XB%X>4**** %%*.*4>**
.**X5".+(B++8
+,! &%      !  E      E  @      B*@4%
P]"  (    "4  .  %*(  4!
This Chapter has been submitted and accepted for publishing in «Big data & decision-making: how big data is
relevant across fields and domains» (Publisher: Emerald) and this is a preprint version of the Chapter.
Please cite this paper as:
Nikiforova A., Daskevics A., Otmane A., "NoSQL security: can my data-driven decision-making be affected
from outside?," In Big data & decision-making: how big data is relevant across fields and domains, Emerald
Studies in Politics and Technology,2022.NoSQL security: can my data-driven decision-making be affected from
outside?
Sustainability!+++Q-5+8)!4K)XX.!X!,,X-+
24. &7"@C.5+,8!OWASP Risk Rang Methodology."%B%)4K)XX
>>>!>!X.I!4X&7"@^' ^'^E4.%  5". +
Y+++8
+! ' "!4%*@% "!J @:"! 5+<8!"%. F0
#!IEEE Security & Privacy-5+8,*,!
+<! %%M!'!5+8!B..!IEEE Internet
of Things Journal65+8<+*<,!
+=! 3!T!J 3 Y! 5+8!@*B.% 4
!Journal of Parallel and Distributed Compung,-+=*+!
28. %"!5++8!The 61 Biggest Data Breaches 5..(B++8!"%B%
) 4K)XX>>>!.!XB%XB*.*B4 5". + (B
++8
+! 4L:.4!JB 44E!"! 5+8! " /(.
F0!
Advances in Computer Science: an Internaonal Journal, -5-8<*=+!
30. 1:"!J 0 E! (!5+8! @% . ) 4%% .%! 
Polics and Technology in the Post-Truth Era!%.@B%40.!
ResearchGate has not been able to resolve any citations for this publication.
ResearchGate has not been able to resolve any references for this publication.