Database Security

  1. 1. The Infrastructure Threat Model
  2. 2. Authentication & Access Control
  3. 3. Least-Privilege Account Design
  4. 4. Network Security for Databases
  5. 5. Encryption at Rest
  6. 6. Encryption in Transit
  7. 7. Auditing & Logging
  8. 8. Backup Security
  9. 9. Database-Specific Hardening
  10. 10. Testing, Pitfalls & Hardening Checklist