Securing the data in a database is typically as important a
Securing the data in a database is typically as important a concern as is its design. Research database security on the web, and then respond to the following:
Describe a few security risks that databases must be protected against.
Describe some steps that can be taken to ensure that a database is secured.
Solution
Risks :
1) excess privileges : many users are provided with default priveleges out of which some are not necessary for them and may be misused.
2) database injection attacks like SQL and No-SQL attacks are used to fetch confidential data and manipulate it
3)malware - application that capture private data
4) Unprotected storage media like backup disks and tapes.
5) lack of professional to handle security mechanisms.
Mitigation steps :
1)monitoring DB access activity with user identification
2) remove excess rights
3) train more number of secirity professionals
4) block malicious requests to data
