Skip to content
Research Article Open access CC BY 4.0

Analysis of the Unexplored Security Issues Common to All Types of NoSQL Databases

Hima Bindu Sadashiva Reddy, Roopesh Reddy Sadashiva Reddy, Ratnaditya Jonnalagadda, Pallavi Singh, Avinash Gogineni

Asian Journal of Research in Computer Science · pp. 1–12 · Published 24 May 2022

10.9734/ajrcos/2022/v14i130323

Abstract

NoSQL databases outperform the traditional RDBMS due to their faster retrieval of large volumes of data, scalability, and high performance. The need for these databases has been increasing  in recent years because data collection is growing tremendously. Structured, unstructured, and semi- structured data storage is allowed in NoSQL, which is not possible in a traditional database. NoSQL needs to compensate with its security feature for its amazing functionalities of faster data access and large data storage. The main concern exists in sensitive information stored in the data. The need to protect this sensitive data is crucial for confidentiality and privacy problems. To understand the severity of preserving sensitive data, recognizing the security issues is important. These security issues, if not resolved, will cause data loss, unauthorized access, database crashes by hackers, and security breaches. This paper investigates the security issues common to the top twenty NoSQL databases of the following types: document, key-value, column, graph, object- oriented, and multi-model. The top twenty NoSQL databases studied were MongoDB, Cassandra, CouchDB, Hypertable, Redis, Riak, Neo4j, Hadoop HBase, Couchbase, MemcacheDB, RavenDB, Voldemort, Perst, HyperGraphDB, NeoDatis, MyOODB, OrientDB, Apache Drill, Amazon, and Neptune. The comparison results show that there are common security issues among the databases. SQL injection security issues were detected in eight databases. The names of the databases were MongoDB, Cassandra, CouchDB, Neo4j, Couchbase, RavenDB, OrientDB, and Apache Drill.

NoSQL security issues document key-value column graph object-oriented multi-model databases

Cited by 8

An Empirical Analysis of Injection Attack Vectors and Mitigation Strategies in Redis NoSQL Database

Muhammad Nazeer Musa, Martins Ekata Irhebhude · Journal of Computing Theories and Applications · 2025

Security Mechanism Based Automotive Software Update Management Strategy

Michael Li, Yuli Ye, Liwen Jiang · Proceedings of the 2024 4th International Conference on Big Data, Artificial Intelligence and Risk Management · 2024

A data model for semi-structured data

Alexander Schukin, Nikolai Scerbakov, Eugenia Rezedinova · AIP Conference Proceedings · 2024

A Systematic Review of Automated Classification for Simple and Complex Query SQL on NoSQL Database

Rabiah Abdul Kadir, Ely Salwana Mat Surin, Mahidur R. Sarker · Computer Systems Science and Engineering · 2024

Novel ensemble bagging-logistic regression algorithm for NoSQL database security

Anuradha Kanade, Amol D. Vibhute, Shantanu Kanade · Applied Intelligence · 2025

A study of NoSQL query injection in Neo4j

Dimitri Van Landuyt, Vincent Wijshoff, Wouter Joosen · Computers & Security · 2024

Article metrics

Real usage data collected on this platform.

5

Page views

0

PDF downloads

0

Outbound clicks

8

Citations

Views over time

Views by country

Approximate, from request IP at view time — not citizenship or institution. Countries with fewer than 5 views are grouped as "Other".

Traffic sources

Referring site, by host.

Views and downloads exclude known bots/crawlers. Citations combines this platform's own DOI-resolved index with each external source's own reported total — see Cited by above for individually listed citing works. Last refreshed 0 seconds ago.