This week’s topics
Database Threat Landscape and Risk Evaluation
- SQL injection attack vectors
- Audit logging mechanisms
- Data-at-rest encryption
- Privilege escalation vulnerabilities
What you will be able to do
- 3.5 Evaluate security risks to the database.
Activity
Seminar, guided reading and a short written task: evaluate security risks to the database.
Study materials
Videos
- SQL Injection - CompTIA Security+ SY0-701 - 2.3 · YouTube · Professor Messer · 5 min · for registered students
Further resources
- CyBOK: Authentication, Authorisation and Accountability Knowledge Area · PDF · Cybok, textbook chapter; 43 pages · for registered students
- Security Engineering (3rd ed.), ch. 27: Secure Systems Development · PDF · Other, textbook chapter; pp. 965–1013 · for registered students
- Operating Systems: Three Easy Pieces (v1.10), ch. 53: Introduction to Operating System Security · PDF · Other, textbook chapter; 12 pages · for registered students
Materials marked “for registered students” open in the student portal, which is set up as soon as you receive final acceptance.