2. The need for database security is due to the fact that organisational databases concentrate sensitive information in a single logical system. a) Explain how Attribute Based Access Control can be used to enforce Database Security. Justify your answer with an example. [15 marks] b) Explain how malicious code could be injected into a cookie to perform SQLi attacks. [10 marks] c) Are SQLi attacks covered by the Computer Misuse Act 1990? Justify your answer. [10 marks] d) Explain how the Plan-Do-Check-Act process model can be used to manage database security risk. [15 marks]