|
所在平台: Udemy |
课程主页: https://www.udemy.com/course/implementing-database-security-for-beginners/
课程评论：没有评论
课程名称：初学者数据库安全实施 课程概述：数据库安全涵盖了一系列信息安全控制措施，旨在保护数据库免受其机密性、完整性和可用性的损害。数据库安全包括多种措施，用于保护数据库管理系统免受恶意网络攻击和非法使用。数据库安全程序旨在保护数据库内的数据、数据管理系统本身，以及所有访问该数据库的应用程序，免受滥用、损坏和入侵。数据库安全涉及建立数据库环境内部安全的工具、流程和方法论。攻击者不断试图隔离和利用软件中的漏洞，而数据库管理软件是一个非常有价值的攻击目标。每天都有新的漏洞被发现，所有开源数据库管理平台和商业数据库软件供应商都定期发布安全补丁。然而，如果不及时使用这些补丁，数据库可能面临攻击的风险。数据库特定的威胁涉及将任意非SQL和SQL攻击字符串引入数据库查询中。这些查询通常作为网页应用表单的扩展生成，或通过HTTP请求接收。如果开发人员未遵循安全编码实践，且组织未进行定期的漏洞测试，任何数据库系统都可能遭受这些攻击。通过增加身份验证、权限级别访问和审计，可以帮助实施数据库系统的安全性。
Database security concerns the use of a broad range of information security controls to protect databases against compromises of their confidentiality, integrity and availability.Database security includes a variety of measures used to secure database management systems from malicious cyber-attacks and illegitimate use. Database security programs are designed to protect not only the data within the database, but also the data management system itself, and every application that accesses it, from misuse, damage, and intrusion.Database security encompasses tools, processes, and methodologies which establish security inside a database environment.Attackers constantly attempt to isolate and target vulnerabilities in software, and database management software is a highly valuable target. New vulnerabilities are discovered daily, and all open source database management platforms and commercial database software vendors issue security patches regularly. However, if you don't use these patches quickly, your database might be exposed to attack.A database-specific threat involves the use of arbitrary non-SQL and SQL attack strings into database queries. Typically, these are queries created as an extension of web application forms, or received via HTTP requests. Any database system is vulnerable to these attacks, if developers do not adhere to secure coding practices, and if the organization does not carry out regular vulnerability testing. Adding authentication, permission level access and auditing can help implement security for database systems.
