7 Strategies For Better Database Security In 2012

Segmenting, hardening, encrypting, insuring, and planning--these are good New Years resolutions for database administrators.

As organizations gear up for a new year, now is the perfect time to look at processes and technologies and reassess how well they really are mitigating risks. On the database level, there are a number of foundational activities that many organizations are still failing to carry out effectively.
The following action list is compiled from some of the advice doled out by database security experts in 2011. Use it wisely to come up with a sane plan in 2012 and beyond:
1. Make Sure Your Database Isnt Easily Searchable On The Web
Several breaches this year embarrassed organizations because their IT departments configured databases touching Web-facing interfaces in such a way that they could be easily searched on the Web.
The databases that exist today have ultimately been designed to allow the easiest access from a multitude of devices and places. In many peoples minds, they think you need to access a server with an application running on that, and that there is a measure of safety for the data sitting underneath the application because the application is secure, said Dr. Mike Lloyd, CTO of RedSeal Systems. But your database is sitting out there, and, in many cases, when it came out of the box, it came configured to be connected to the Internet.
See:
Web-Searchable Databases An Increasing Security Risk
2. Segment Your Data Better
When organizations segment their high-value data in databases separate from less sensitive information, theyre able to prioritize risk management and institute more targeted protection layers.
Medium to large organizations are not segmenting enough, said Chris Novak, managing principal at Verizon Business. In these organizations, theyve got databases spread over offices, campuses, and complexes around the globe. And the problem is that if theyre not segmenting, then a risk in one place becomes a risk everywhere.
See:
Sound Database Security Starts With Segmentation
Read the rest of this article on
Dark Reading
.
Database access controls keep information out of the wrong hands. Limit who sees what to stop leaks--accidental and otherwise. Also in the new, all-digital Dark Reading supplement: Why user provisioning isnt as simple as it sounds.
Download the supplement now
. (Free registration required.)

Last News
▸ Hack Your Hotel Room ◂ Discovered: 23/12/2024 Category: security	▸ Website hacks happened during World Cup final. ◂ Discovered: 23/12/2024 Category: security	▸ Criminal Possession of Government-Grade Stealth Malware ◂ Discovered: 23/12/2024 Category: security

**Cyber Security Categories**
Google Dorks Database	Exploits Vulnerability	Exploit Shellcodes

CVE List

Tools/Apps

News/Aarticles

Phishing Database

Deepfake Detection

Trends/Statistics & Live Infos

Tags:
7 Strategies For Better Database Security In 2012