Presented at INSYNC 21

Session ID: 100910

This talk is for database and information security professionals.

The database holds the crown jewels of the organization; however, the infosec security teams have little understanding of working of the database and database developers, designers, and DBAs have little understanding of security concepts. I get it, we get pressure from the top and the users to deliver a system with little time or budget to apply to database security. In this talk, we are going to take the 10,000 meter view of the database and look at the attack surface, attack vectors, and how to mitigate those attacks. At the end of the presentation, developers, designers, and DBAs will have action items they can take back to their shop and start improving security.