Database Security for Cyber Professionals

Name: Database Security for Cyber Professionals
Rating: 3.8 (119 reviews)

Learn to Hack and Protect Relational Databases

Created byChad Russell

Last updated 2/2017

English

English [Auto],

What you'll learn

Protect database such as MySQL, Oracle and PostgreSQL from attackers.
Hack and pen test databases such as MySQL, Oracle and PostgreSQL.
Design a defense in depth architecture for database environments.

Course content

2 sections • 15 lectures • 3h 34m total length

Course Introduction4:01
Master database security for MySQL, Oracle, PostgreSQL, and big data through hands-on labs, architecture exploits, and defense-in-depth strategies that minimize attack surfaces.

Database Security Core - Part 15:00
Examine major database threats, such as stolen credentials, SQL injection, spearfishing, insider attacks, and back doors, and explore practical mitigations to protect sensitive data.
Database Security Core - Part 25:02
Explore database inference attacks, data aggregation and data association, the role of least privilege and insider threats, and common misconfigurations, including worms, weak passwords, and auditing.
Database Security Core - Part 35:03
Encrypt data in transit and at rest, monitor access and audit events, and use tokenization with robust key management to minimize exposure and meet PCI and data privacy requirements.
Database Security Core - Part 47:50
Apply defense in depth to database security with administrative and detective controls; use encryption, key management, data redaction, separation of duties, and auditing, including homomorphic encryption for secure cloud computations.
Platform Hardening8:20
Explore operating system, database, and application hardening to minimize attack surface. Establish and audit baselines with change tracking to drive secure builds, patching, and mitigating deviations.
MySQL Security Lab Buildout8:01
Set up a Linux lab and install MySQL, secure it with the security script, and disable remote root login. Load the Sakila sample data and explore schemas with MySQL Workbench.
MySQL Architecture and Exploits17:12
Dissect MySQL architecture and default storage, review the user table and privileges, and examine enumeration, exploits, SQL injection, and privilege escalation for database security.
Locking Down MySQL - Part 117:57
learn to lock down MySQL databases through patching, least privilege, and secure configuration. explore OS-level controls, default user accounts, logging, and clean-up practices to reduce attack surface.
Locking Down MySQL - Part 217:51
Secure MySQL by removing backdoor accounts, renaming root, enforcing SSL for remote users, applying per-app least-privilege grants at database and table levels, and enabling query logging.
Oracle Exploitation and Security Best Practices43:49
Set up an Oracle database lab, examine architecture, and implement security best practices by auditing, hardening the listener, restricting services, and applying roles for least privilege.
PostgreSQL Architecture, Exploits and Hardening20:09
Explore PostgreSQL architecture from the postmaster to data and log files, and learn to secure authentication, SSL encryption, and network hardening for cyber defense.
Storage Encryption19:15
Secure data at rest across ephemeral, long-term, and raw storage (SAN, NAS, virtualization) with full disk, file, database, cloud, and device encryption, plus key management and TPM-based protections.
Key Management16:59
Explore encryption key management across cloud and devices. Learn KMIP, key lifecycles, separation of duties, dual control, split knowledge, with certificates, HSMs, and CRLs.
Locking Down Big Data18:02
Secure big data across SQL and NoSQL ecosystems, covering Hadoop, HDFS and MapReduce, various NoSQL stores, and practices like authentication, access control, encryption, auditing, and Kerberos.

Requirements

Students should have a basic understanding of database technology and networking.
Have a working internet connection.

Description

Course Overview

In this course you will learn how to secure open source and commercial database platforms against modern threats and attack vectors. This course includes a mix of conceptual lectures and detailed screencasts outlining all the steps involved with conducting test attacks and subsequently securing your database platforms.

Table of Contents

Lessons 1 – 4 - Database Security Core - Here we will cover modern database security architectures, attack vectors and security threats. You will learn how to design database defense in depth architectures utilizing a combination of preventive, corrective and detective controls.

Lesson 5 – Platform Hardening – Minimizing the attack surface area of operating systems, databases and applications is a key tenet of operational security. Let’s talk about techniques for OS/DB and App hardening.

Lesson 6 – MySQL Security Lab Build out – In this Lesson you will learn how to build your own MySQL Security Lab environment using Oracle VirtualBox.

Lesson 7 – My SQL Architecture and Exploits – After building out your MySQL Security Lab I will explain the MySQL Security Architecture and show you how to attack MySQL Database installations.

Lesson 8 – Locking Down MySQL – You will learn how to effectively secure MySQL Database installations using industry best practices and techniques.

Lesson 9 – Oracle Exploitation and Security Best Practices – You will learn how to build an Oracle Database Security Lab environment as well as how to exploit and secure Oracle Databases from modern threats and attack vectors.

Lesson 10 – PostgreSQL Architecture, Exploits and Hardening – You will learn PostgreSQL’s Security architecture and how to exploit and secure PostgreSQL Databases from modern threats and attack vectors.

Lesson 11 – Storage Encryption - Storage Security has more moving parts than ever, especially considering the convergence of IP and Storage Networking technologies. In this section we will talk about how to secure data at rest on Storage Area Networks, NAS and local systems.

Lesson 12 – Key Management - Any encryption is only as good as the protection of its keys. In this section you will learn about encryption key management procedures and best practices.

Lesson 13 - Locking Down Big Data - Big Data is a broad term for data sets so large or complex that traditional data processing applications are inadequate. Big data is defined by significant data volume, variety and volume. With the aggregation of these large data sets comes new security challenges. In this lesson you will learn how to secure Big Data. Linux Live Response - In this lesson you will learn how to statically compile forensic response tools in Linux to be used to conduct a live response of another Linux system.

Who this course is for:

Anyone interested in learning how to hack and protect database environments.
Students who want to know how hackers breach commercial and open source databases.

Database Security for Cyber Professionals

What you'll learn

Explore related topics

Course content

Database Security Course Introduction1 lecture • 4min