数据库LDAP和应用服务器安全.pptVIP

J2EE 安全文档 JAVA Security /javase/technologies/security/ JAVA Security Reference Documentation /security/reference/docs/index.html Sun Security Services /software/security/resources.html /security/ 数据库安全 关系数据库 Relational Database Management System 数据库安全问题 数据丢失、备份、日志 入侵：窃取、篡改、删除 加密 加密技术用于数据库 传输期间：SSL、VPN 存储与备份期间 数据库用户 和操作系统用户对应关系 角色与群组 口令 权限 SELECT(读)， INSERT(追加)， UPDATE(写)，DELETE， RULE(规则)，REFERENCES(外键)，和TRIGGER 数据库数据的加密 对数据库数据的加密三个不同层次 OS层 DBMS内核层（在服务器端） DBMS外层（在客户端） 数据库备份技术 备份的层次 表、库、、文件系统 损坏与恢复 工具与支持 内置工具 第三方工具 SQL Standardization Encryption and Key Management SQL Server 2008 has rich support for various types of data encryption using symmetric and asymmetric keys, and digital certificates. Encryption key hierarchy in SQL Server 2008 Apache Directory Studio Apache Directory Studio is a complete directory tooling platform intended to be used with any LDAP server however it is particularly designed for use with the ApacheDS. It is an Eclipse RCP application, composed of several Eclipse (OSGi) plugins, that can be easily upgraded with additional ones. These plugins can even run within Eclipse itself. Active Directory Active Directory is a technology created by Microsoft that provides a variety of network services, including: LDAP-like directory services Kerberos-based authentication DNS-based naming and other network information 实验 Active Directory Exchange Server OpenLDAP OpenLDAP Software is an open source implementation of the Lightweight Directory Access Protocol. The suite includes: slapd - stand-alone LDAP daemon (server) libraries implementing the LDAP protocol, and utilities, tools, and sample clients. iPlanet Directory Server The Directory Server component of Directory Server Enterprise Edition (DSEE) provides the most scalable, high-performance LDAP data store for identity information in the industry and serves as the foundation for the new generation of e-business applications and Web services. The Directory Server provi