登录查看更多内容

How can you secure databases for optimal performance?

由人工智能和领英社区提供技术支持

Databases are essential for storing, retrieving, and manipulating data for various applications and services. However, databases also face many security threats, such as unauthorized access, data breaches, injection attacks, ransomware, and denial-of-service attacks. To protect your databases from these risks and ensure optimal performance, you need to follow some best practices and techniques for database security. In this article, we will cover six aspects of database security that you should consider as a database administrator.

此文章中的业界达人

由社区从 7 条内容中精选。了解更多

Vishal Srivastava

SQL Database Administrator
Hardik(kumar) Patel

GenAI Application Architect | LLMOps | LangChain | Cloud Architect | DevOps | Full-Stack Developer

1 Authentication and authorization

The first step to secure your databases is to control who can access them and what they can do with them. Authentication is the process of verifying the identity of a user or a system that tries to connect to your database. Authorization is the process of granting or denying permissions and privileges to different users or roles on your database objects, such as tables, views, procedures, and functions. You should use strong passwords, encryption, and multi-factor authentication for authentication, and follow the principle of least privilege for authorization. This means that you should only give the minimum permissions and privileges that are necessary for a user or a role to perform their tasks, and revoke them when they are no longer needed.

添加您的观点

Vishal Srivastava

SQL Database Administrator
举报内容
There are several ways to secure your database, few of them are as follows 1. Following the principle of least privilege's. 2. Reducing the surface area of attacks like changing the default port, setting firewall rules, not exposing database server to public network. 3. Enabling TDE for protecting data at rest. 4. Enabling Always encryption and dynamic data masking. 5. Disabling the sa account. These ways do not have much or any impact on the database performance. Security and performance are two independent factors.

已翻译

赞
Harsh Kumar

SQL SERVER DBA ?? Salik || Etisalat by e& || Emirates Nuclear Energy || RakBank || AXA Insurance || 11K Followers
举报内容
Authentication: Verifies user or system identity before granting database access. * Strong passwords * Encryption * Multi-factor authentication Authorization: Dictates permissions and privileges for specific database objects (tables, views, procedures, functions). Principle of least privilege: Grant minimal necessary permissions, revoke when no longer needed.

已翻译

赞

2 Encryption and masking

Another way to secure your databases is to encrypt and mask your data, both in transit and at rest. Encryption is the process of transforming your data into an unreadable form using a secret key, so that only authorized parties can decrypt it with the same or a different key. Masking is the process of hiding or replacing sensitive data, such as personal or financial information, with fake or anonymized data, so that unauthorized parties cannot access or misuse it. You should use encryption and masking to protect your data from eavesdropping, tampering, or theft, especially when you transfer it over a network or store it on a disk or a cloud service.

添加您的观点

Harsh Kumar

SQL SERVER DBA ?? Salik || Etisalat by e& || Emirates Nuclear Energy || RakBank || AXA Insurance || 11K Followers
举报内容
Encryption - Scrambling data : Renders data unreadable without the correct decryption key * Transparent Data Encryption (TDE) * Always Encrypted * Column-level encryption * Backup encryption Masking- Obscuring sensitive data: Replaces or partially obscures sensitive information with surrogate values. * Dynamic Data Masking * Static data masking Key difference- Encryption: Data is scrambled, requiring decryption for meaningful use. Masking: Data is transformed but remains usable, original values cannot be recovered.

已翻译

赞

3 Backup and recovery

A third aspect of database security is to backup and recover your data in case of a disaster, such as hardware failure, human error, or malicious attack. Backup is the process of creating a copy of your data and storing it in a safe location, such as a different server, a removable device, or a cloud service. Recovery is the process of restoring your data from a backup to your original or a new database. You should backup your data regularly, according to your business needs and recovery objectives, and test your backups periodically to ensure that they are valid and usable. You should also have a recovery plan that defines the steps and procedures to follow in case of a data loss or corruption.

添加您的观点

4 Auditing and monitoring

A fourth aspect of database security is to audit and monitor your database activities and events, such as connections, queries, transactions, changes, errors, and alerts. Auditing is the process of recording and logging these activities and events for later review and analysis. Monitoring is the process of observing and measuring these activities and events in real time or near real time. You should use auditing and monitoring to track and verify who did what, when, where, and how on your database, and to detect and respond to any anomalies, errors, or threats that may affect your database performance or security.

添加您的观点

Harsh Kumar

SQL SERVER DBA ?? Salik || Etisalat by e& || Emirates Nuclear Energy || RakBank || AXA Insurance || 11K Followers
举报内容
This is one of the best practice all DBAs must follow that is auditing and monitoring databases and database servers. There is a C2 audit (default) in SQL Server which we can enable. There are another database and instance level audit mechanisms available in SQL Server with which we can design and track everything going on in database. We can use scripts as well as third party monitoring tools to monitor the databases that will help us with the performance baseline and statistics. Some famous tools are like scom, solarwinds, idera etc. There are some in build features in SQL Server like activity monitor, server dashboard, profiler, DMV & DMFs, etc. and there is an application called perfmon in windows OS that can also help to some extent.

已翻译

赞

5 Patching and updating

A fifth aspect of database security is to patch and update your database software and components, such as the operating system, the database management system, the drivers, the libraries, and the applications. Patching is the process of applying fixes or improvements to your software and components to address bugs, vulnerabilities, or compatibility issues. Updating is the process of installing new or enhanced versions of your software and components to add features, functions, or performance improvements. You should patch and update your database software and components regularly, according to the vendor's recommendations and your own testing and evaluation, to keep your database secure, stable, and efficient.

添加您的观点

Harsh Kumar

SQL SERVER DBA ?? Salik || Etisalat by e& || Emirates Nuclear Energy || RakBank || AXA Insurance || 11K Followers
举报内容
Stay up-to-date with support cycles: Microsoft has specific lifecycle policies for different SQL Server versions. Prioritize security updates: Address critical vulnerabilities promptly. Align with organizational policies: Follow established guidelines for change management and testing. Regular patching and updating are essential for maintaining the security, performance, and compliance of your SQL Server environments. Service Packs (SPs): Major updates, often including cumulative fixes and new features. Cumulative Updates (CUs): Regularly released bundles of hotfixes and security patches. General Distribution Releases (GDRs): Critical security fixes for specific issues. With the latest SQL Server 2022 MS stopped releasing SPs.

已翻译

赞

6 Hardening and tuning

A sixth aspect of database security is to harden and tune your database configuration and performance, such as the network, the firewall, the ports, the parameters, the indexes, and the queries. Hardening is the process of strengthening your database security by disabling or removing unnecessary or risky features, functions, or services. Tuning is the process of optimizing your database performance by adjusting or improving the settings, structures, or operations of your database. You should harden and tune your database to reduce the attack surface, prevent unauthorized access, and improve the speed, reliability, and scalability of your database.

添加您的观点

Deepthi Goguri

Microsoft Data Platform MVP | Public Speaker | Exploring Life Within!
举报内容
Performance tuning your slow running queries should be in the top list for optimal performance. Having coding standard documentation can be really beneficial within the teams. Having regular team meetings to discuss the latest features that can make the performance tuning easier can be helpful. Considering upgrading your old database servers to the latest versions can also bring all the inbuilt tuning automated capabilities without changing much settings except the latest compat mode of the database. One of the example for SQL Server is Intelligent query processing features.

已翻译

赞

7 Here’s what else to consider

This is a space to share examples, stories, or insights that don’t fit into any of the previous sections. What else would you like to add?

添加您的观点

Hardik(kumar) Patel

GenAI Application Architect | LLMOps | LangChain | Cloud Architect | DevOps | Full-Stack Developer
举报内容
The title of the article is misleading since it suggests that securing a database leads to optimal performance, but in reality, security and performance are separate matters. To enhance security, prioritize data protection, implement audits, and configure appropriate authentication and authorization, including database encryption with customer-managed keys for highly sensitive data. For improved performance, explore strategies like query optimization, effective indexing, data partitioning by region, and the use of replicated cloned databases for reporting and analytical tasks.

已翻译

赞

Database Administration

+ 关注

给文章评分

我们借助人工智能创建了此文章。您认为这篇文章怎么样？

很棒不太好

举报此文章

查看全部

How can you secure databases for optimal performance?

1

2

3

4

5

6

7

1 Authentication and authorization

2 Encryption and masking

3 Backup and recovery

4 Auditing and monitoring

5 Patching and updating

6 Hardening and tuning

7 Here’s what else to consider

Database Administration

给文章评分

感谢您的反馈

更多Database Administration相关文章

更多相关阅读内容

How can you secure databases for optimal performance?

1

2

3

4

5

6

7

1 Authentication and authorization

2 Encryption and masking

3 Backup and recovery

4 Auditing and monitoring

5 Patching and updating

6 Hardening and tuning

7 Here’s what else to consider

Database Administration

给文章评分

感谢您的反馈

查看其他技能