14. Database Security

Porter: Thirtieth floor, sir. You’re expected.Sam: Um . . . don’t you want to search me?Porter: No, sir.Sam: Do you want to see my ID?Porter: No need, sir.Sam: But I could be anybody.Porter: No you couldn’t, sir. This is Information Retrieval.

—TERRY GILLIAMBRAZIL

The term database security is almost an oxymoron. Practical security is something that most databases largely ignore. For example, most databases don’t provide any sort of encryption mechanism whatsoever. The security mechanisms that are present are rarely standard between databases. This makes database security a difficult topic to which to do justice. We recommend that you supplement this chapter with a thorough read of the documentation that comes with your ...

Get Building Secure Software: How to Avoid Security Problems the Right Way now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.