Chapter 18. Database Attacks

Have you ever received e-mail from someone you don’t know, advertising some product or gimmick you’ve never heard of? Ever wonder how on earth this person got your e-mail address? Well, your name and e-mail address are probably sitting on a database server somewhere with the names and e-mail addresses of millions of other people who are wondering the same thing. Database servers, however, can be used for a lot more useful things than sending unsolicited e-mail. For example, some organizations use database servers to store confidential information such as customer names, credit card numbers, and invoices, as well as employee salaries and social security numbers.

It’s ironic, however, that database servers tend to be ...

Get Assessing Network Security now with the O’Reilly learning platform.

O’Reilly members experience live online training, plus books, videos, and digital content from nearly 200 publishers.