Common misconceptions about database security

TalkBack 9 of 10:

Next »

« Previous

• Thread View
• Flat View

Developers Issue - not always DBA

Certainly, systematic attacks like unpatched vulnerabilities are the DBA's issue, but most SQL Injection and other issues are not hte DBA's problem, they are the application developer's problem.

The statement: >>You have no idea where the sensitive data resides and even though some tools exist that try to identify sensitive data automatically, they are far from perfect, far more expensive and less thorough than if you simply ask the DBA.<<

lists the biggest issue in my mind with security: everyone thinks the DBA is a God.

The DBA doesn't have the slightest idea what is stored in the database - especially for anything other than a simple 7 table OLTP benchmark app. Most modern ERP systems are far too complex for the DBA to know anything about the data they contain.

== John ==

Posted by: jgwinner   Posted on: 05/07/08 You are currently: a Guest | Members login | Terms of Use

Alert moderator to an offensive message

Subscribe to this discussion via Email or RSS

SponsoredWhite Papers, Webcasts, and Downloads

• Why Isn't Server Virtualization Saving Us More? A Few Small Changes May Dramatically Increase Your Efficiency VMware Companies have rapidly adopted server virtualization over the past few ... Download Now
• Open Standards Technologies Provide the Ingredients for Delivering Security Across the Papa Gino's Enterprise Dell Papa Gino's Holdings Corporation founded by the entrepreneur operates one ... Download Now
• Reducing Server Total Cost of Ownership with VMware Virtualization Software VMware VMware virtualization enables customers to reduce their server TCO and ... Download Now