The Database Hacker's Handbook: Defending Database Servers

by David Litchfield, Chris Anley, John Heasman

Databases are the nerve center of our economy. Every piece of your personal information is stored there-medical records, bank accounts, employment history, pensions, car registrations, even your children's grades and what groceries you buy. Database attacks are potentially crippling-and relentless. In this essential follow-up to The Shellcoder's Handbook, four of the world's top security experts teach you to break into and defend the seven most popular database servers. You'll learn how to identify vulnerabilities, how attacks are carried out, and how to stop the carnage. The bad guys already know all this. You need to know it too. * Identify and plug the new holes in Oracle and Microsoft(r) SQL Server * Learn the best defenses for IBM's DB2(r), PostgreSQL, Sybase ASE, and MySQL(r) servers * Discover how buffer overflow exploitation, privilege escalation through SQL, stored procedure or trigger abuse, and SQL injection enable hacker access * Recognize vulnerabilities peculiar to each database * Find out what the attackers already know Go to www.wiley.com/go/dbhackershandbook for code samples, security alerts , and programs available for download.

Genres: Technical, Hackers, Computer Science, Programming, Technology

532 pages, Kindle Edition

First published July 14, 2005

About the author

Librarian Note: There is more than one author by this name in the Goodreads database.

David Litchfield is founder and chief research scientist of NGSSoftware Ltd., a UK-based security solutions provider. He has been recognized as the world's premier expert on Oracle database security, and is the designer of NGSSQuirreL, a powerful tool for identifying and assessing database vulnerability. David is a regular conference speaker and has lectured government agencies on security topics.

Reviews

[Mayur Sinha · Rating 2 out of 5]

Not so good for security practitioners. The book needs a drastic update.

[Deepak]

ok