Question

Database security can be a very complicated business. There are many different forms of database using many different languages as a foundation. Databases are implemented in a variety of environments and contexts. This highly variable context related to database implementation means that security professionals are required to consider the risks to database security within the specific context; however, there are some security threats and mitigating controls that are common across database solutions. These common approaches to database security are known as security models. For example, access controls, physical security, remote access security, and monitoring of privileged accounts are all examples of threats common across database solutions that require appropriate mitigations.

Discuss the following:

• What are some examples of security models that can be used to support database security?
• Describe a strategy that database administrators can use to ensure that applications used to enter data into databases cannot be used to exploit that data.
• Explain strategies that mitigate common database security vulnerabilities.

Answer 1

Many layers and types of information security control are appropriate to databases, including:

Access control.

Auditing.

Authentication.

Encryption.

Integrity controls.

Backups.

Application security.

Database Security applying StatisticalMethod.

Here are some tips on how to prevent database vulnerability.

Make the Database a Priority. ...

Maintain a Strong Framework for Version Control Management. ...

Never Stop Auditing. ...

Define And Enforce Roles And Responsibilities. ...

Stay Up-To-Date With Database Regulatory Compliance. ...

Systemize and Automate.