Hacking databases for owning your data
Short summary:
MS SQL Server Attacks. Live MS SQL Server Database hacking. Stealing a complete database from Internet. Stealing data from Internet with a couple of ...
Long summary:
Hacking databases for owning your dataPage 1Hacking databases for owningyour dataCesar CerrudoCesar CerrudoEsteban Martinez FayoEsteban Martinez FayoArgeniss (www.argeniss.com)Argeniss (www.argeniss.com)Page 2OverviewIntroductionWhy database security?How databases are hacked?Oracle Database Server attacksMS SQL Server attacksHow to protect against attacks?ConclusionsReferencesPage 3Introduction By one estimate 53 million people have had dataabout themselves exposed over the past 13 months.(InformationWeek 03/20/2006) This is old news right now the number is > 100 million !!! Data theft is becoming a major threat. Criminals have identified where the gold is. In the last year many databases from fortune 500companies were compromised. As we will see compromising databases is not bigdeal if they haven't been properly secured.Page 4IntroductionPage 5Introduction Want to be more scared?Chronology of Data Breaches http://www.privacyrights.org/ar/ChronDataB reaches.htmSome estimated money losses ChoicePoint: $15 million B.J.'s Wholesale: $10 million Acxiom: $850000 Providence Health System: $9 millionPage 6IntroductionOpenmarketpricing ofpersonaldata fromSwipeToolkitHow much personal data worth?Page 7Why Database security? Databases are were your most valuable data rest Corporate data. Customer data. Financial data. etc. If your databases don't work then your companywon't work Try to do a quick estimation of how much money you willlose if your databases don't work for a couple of hours aday etc. If your databases are hacked then your company canrun out of business or you can lose millions.Page 8Why Database security? You must comply with regulations laws etc. Sarbanes Oxley (SOX). Payment Card Industry (PCI) Data Security Standard. Healthcare Services (HIPAA) . Financial Services (GLBA) . California Senate Bill No. 1386 . Data Accountability and Trust Act (DATA). Etc.Page 9Why Database security? Database vulnerabilities affect all database vendors Some vendors (like Oracl ...
Source: www.blackhat.com
Search Terms:
Related
Files under this topic are not filed yet. Please use search bar to find other one
