Dark Reading's Database Security Tech Center is your portal to all the news, product information, technical data, and other information related to the topic of database security.  Written for database administrators and businesspeople as well as security and IT professionals, the Database Security Tech Center is a single community dedicated to protecting one of the most sensitive assets in cyberspace: the company database.

Breaking News

'Operation Aurora' Changing The Role Of The CISO
Targeted attacks out of China against Google and other U.S. firms have forced some chief information security officers to reach out to their counterparts in other organizations and share attack, forensics information

Product Watch: Kaspersky Lab Rolls Out Password Manager
Feature will also be bundled with upcoming all-in-one Internet security suite

Ex-TSA Employee Indicted For Tampering With Database Of Terrorist Suspects
Case serves as a wake-up call about the potential dangers of malicious insider access to sensitive data

More Stories:

• Voluntary Breach Disclosure Rare But Valuable
• Product Watch: Gemalto Rolls Out Secure Online Banking On A Stick
• New Massachusetts Data Privacy Law Adds Incentive For Strong Database Security
• Securing The Link Between Web Applications And Databases
• Database Security Metrics Project Needs Community Input
• Comcast Goes DNSSEC, OpenDNS Adopts Alternative DNS Security
• Criminals Hide Payment-Card Skimmers Inside Gas Station Pumps

MORE NEWS >>>

By The Numbers

Only about half of organizations today monitor new database accounts and privileged user access.

Blog

Moving to a cloud-based database and virtual environment comes with plenty of benefits, but there's also a potential price to pay for security.

read more >

Database Security Reports

Protecting Databases from Web Applications
Most external hacks of databases occur because of flaws in Web applications that link to those databases. Yet, enterprises are increasingly exposing their most valuable data to these outward-facing interfaces. In this Dark Reading Tech Center report, we'll discuss how security teams, database administrators and application developers can work together to improve the defenses of both front-end Web applications and back-end databases to prevent these attacks from succeeding, and offer a look at the most frequent Web-borne database attacks.

Database Activity Monitoring: Emerging Technology Keeps Tabs on Assets
You can read about the consequences of not protecting critical data in the daily headlines. In response, security-conscious organizations are tackling the complexities involved in effectively monitoring their databases for potential leaks and compromises. Fortunately, an emerging class of software is stepping up to help. Here’s what enterprises need to know about selecting, deploying, and managing DAM technology.

SQL Injection: A Major Threat to Data Security
Of all the attacks taking place on Web sites across the Internet today, SQL injection is the most popular for cybercriminals trying to hack their way into corporate data stores. But for such a pervasive threat, there is still little understanding within the development and database communities about what constitutes a SQL injection vulnerability, how attacks against a SQL injection bug work, and how to mitigate the risk. We examine how these exploits work and what you can do to stop them.

Protecting Your Databases From Careless End Users
While much attention is paid to outside attackers' efforts to crack enterprise databases, IT organizations often overlook an even greater threat: end users. Ignorance and disregard of company security policies may lead employees to expose their organizations' databases to compromise, often without even knowing that they’re doing so. In this report, we offer advice on how to educate users on database security, and some common-sense recommendations on how to limit the damage.

A Database Administrator's Guide to Security
While most security pros have become painfully aware of the threats posed to their organizations' databases, many of those who create and maintain the databases still don't fully understand the danger.  This "security primer" is designed to open the eyes of the DBA to the risks posed by poor database security – and to current "best practices" that can help prevent those risks from becoming reality.

Why Your Databases Are Vulnerable To Attack - And What You Can Do About It
Most of an enterprise’s most sensitive and valuable information resides in databases. Yet, in many organizations, database security is often neglected, misunderstood, or even ignored. In this report, we discover why databases have become one of the most popular targets for hackers - and how everyday mistakes in database administration contribute to these attacks. We also offer some advice on what your organization can do to protect your most critical data - and to stop hackers in their tracks.

Database Security Newsfeed

• Synology Launches DSM 2.3 With Cloud backup, Encryption
• L.A. Area Dining Establishments Informed Of Possible Data Security Breach
• Freescale Semiconductor Joins UTM Security Appliance Market
• Imperva And Qualys Partner To Help Enterprises Protect Against Malicious Attacks On Web Applications
• F5 Networks And Infoblox Launch Joint DNSSEC Solution
• Sentrigo Introduces Repscan 3.0, Vulnerability Assessment And Security Scanning For Databases

MORE NEWSFEED >>