Название: Database and Application Security: A Practitioner's Guide (Early Release)
Автор: R. Sarma Danturthi
Издательство: Addison-Wesley Professional/Pearson Education
Год: 2024
Страниц: 309
Язык: английский
Формат: epub (true)
Размер: 25.4 MB

An all-encompassing guide to securing your database and applications against costly cyberattacks!

In a time when the average cyberattack costs a company $9.48 million, organizations are desperate for qualified database administrators and software professionals. Hackers are more innovative than ever before. Increased cybercrime means front-end applications and back-end databases must be finetuned for a strong security posture. Database and Application Security: A Practitioner's Guide is the resource you need to better fight cybercrime and become more marketable in an IT environment that is short on skilled cybersecurity professionals.

In this extensive and accessible guide, Dr. R. Sarma Danturthi provides a solutions-based approach to help you master the tools, processes, and methodologies to establish security inside application and database environments. It discusses the STIG requirements for third-party applications and how to make sure these applications comply to an organizations security posture. From securing hosts and creating firewall rules to complying with increasingly tight regulatory requirements, this book will be your go-to resource to creating an ironclad cybersecurity database.

In this guide, you'll find:

Tangible ways to protect your company from data breaches, financial loss, and reputational harm
Engaging practice questions (and answers) after each chapter to solidify your understanding
Key information to prepare for certifications such as Sec+, CISSP, and ITIL
Sample scripts for both Oracle and SQL Server software and tips to secure your code
Advantages of DB back-end scripting over front-end hard coding to access DB
Processes to create security policies, practice continuous monitoring, and maintain proactive security postures

Who Should Read This Book?
This book is for IT professionals who want to learn how to secure their DB or their applications with a multi-pronged stature. System administrators can use this book in securing their hosts, creating firewall rules, and hardening the IIS side of hosting an application. Part of the book might be helpful in learning security of software and DBs and may help with Sec+ and CISSP certifications.

The book should be used at every stage of the software or DB development process to create a strong cybersecurity posture. It also helps in learning the fundamentals for an aspiring student in IT and cybersecurity. The book touches on both Oracle and SQL Server software. Any programming language security can be achieved with applications by incorporating the methods discussed in this book. Students can learn about change management and its process before they enter a corporate environment. Parts of the book also discuss steps for taking care of mobile devices and BYOD at an office. This book could also be used for a general audience to understand the attacks that exist in DB and applications and learn how to prevent those attacks.

The book is divided to four sections:

Part I. Security Fundamentals
Part II. Database Security—The Back End
Part III. Application Security—The Front End
Part IV. Security Administration