The Database Hacker's handbook (Defending Database Servers)

Saturday, October 01, 2005

This book is about database security. The authors guide you to break into the world's seven most popular database servers and defend them. The book aims to provide practical source material to those wanting to secure their database systems on the network, which includes database administrators, network administrators and security auditors.

The book is highly technical and the authors assume that the reader is familiar with basic security concepts like, buffer overflows, format string bugs, SQL injection and so on, though programming skills are not necessary in order to understand the content of the book.

A major part of the book covers specific details of individual, practical security problems of the seven database systems: Oracle, DB2, Informix, Sybase ASE, MySQL and PostgreSQl. The book provides you with solutions to these problems, specific workarounds and general configuration deadlines. 

Each of the eight parts of the book discusses one database system. Every section discusses the basics of the database architecture; and how the systems can be attacked, various categories of the security problems, how these can be used by the attacker and how to defend against them. The book also discusses the best approaches to securing a database system.

Page(s)   1