数据库 外文翻译 外文文献 英文文献 数据库安全.docxVIP

DatabaseSecurity “Why?do?I?need?to?secure?my?database?server??No?one?can?access?it —?it’s?in?a?DMZ?protected?by?the?firewall!”?This?is?often?the?response when?it?is?recommended?that?such?devices?are?included?within?a?security health?check.?In?fact,?database?security?is?paramount?in?defending?an organizations?information,?as?it?may?be?indirectly?exposed?to?a?wider audience?than?realized. This?is?the?first?of?two?articles?that?will?examine?database?security. In?this?article?we?will?discuss?general?database?security?concepts?and common?problems.?In?the?next article we will focus?on?specific Microsoft?SQL?and?Oracle?security?concerns. Database?security?has?become?a?hot?topic?in?recent?times.?With?more and?more?people?becoming?increasingly?concerned?with?computer?security, we?are?finding?that?firewalls?and?Web?servers?are?being?secured?more?than ever(though?this?does?not?mean?that?there?are?not?still?a?large?number of?insecure?networks?out?there).?As?such, the?focus?is?expanding to consider?technologies?such?as?databases?with?a?more?critical?eye. ◆?Commonsensesecurity Before?we?discuss?the?issues?relating?to?database?security?it?is prudent?to?high-?light?the?necessity?to?secure?the?underlying?operating system?and?supporting?technologies.?It?is?not worth?spending?a?lot?of effort?securing?a?database?if?a?vanilla?operating?system?is?failing?to provide?a?secure?basis?for?the?hardening?of?the?data-?base.?There?are?a large?number?of?excellent?documents?in?the?public?domain?detailing measures?that?should be?employed?when?installing?various?operating systems. One?common?problem?that?is?often?encountered?is?the?existence?of?a database?on?the?same?server?as?a?web?server?hosting?an?Internet?(or?Intranet) facing?application.?Whilst?this?may?save?the?cost?of?purchasing?a?separate server,?it?does?seriously?affect?the?security?of?the?solution.?Where?this is?identified,?it?is?often?the?case?that?the?database?is?openly?connected to the?Internet.?One?recent?example?I?can?recall?is?an?Apa