Securing MySQL-

Arwan Ahmad Khoiruddin, S.Kom., M.Cs.

Sekilas tentang database

● Saat ini, kita selalu berhubungan dengan database, baik secara langsung maupun secara tidak langsung

Sekilas tentang database (lanj't)

● Semakin maju sebuah organisasi/negara, semakin banyak berhubungan dengan basis data

● Semakin banyak data yang lalu lalang, semakin butuh jaminan keamanan data

Data Security● Tidak semua data boleh dilihat setiap

orang.

● Keamanan data: aman secara fisik dan non-fisik.

● Aman fisik berarti terhindar dari kemungkinan-kemungkinan kerusakan, bencana, kehilangan dsb. (ISO 9001:2008)

● Aman non-fisik → bebas dari tindakan “nakal” akibat adanya system's security vulnerability

Vulnerability

● Vulnerable: exposed to being attacked or harmed

(Oxford Dictionary)

● In computer security, the word vulnerability refers to a weakness in a system allowing an attacker to violate the confidentiality, integrity, availability, access control, consistency or audit mechanisms of the system or the data and applications it hosts. Vulnerabilities may result from bugs or design flaws in the system. A vulnerability can exist either only in theory, or could have a known exploit. Vulnerabilities are of significant interest when the program containing the vulnerability operates with special privileges, performs authentication or provides easy access to user data or facilities (such as a network server or RDBMS) (http://dev.mysql.com)

Fighting for Better Security(http://dev.mysql.com)

● We do fighting with intruders

● Do not give anyone (except root account) access to the user table in the mysql database.

● Do not grant more previlleges than necessary. Never grant previlleges to all hosts.

● Do not store plain-text password in your database. Instead, use MD5 or other keys.

● Do not choose password from dictionary

Fighting for ... (cont'd)

● Invest in firewall● Do not trust any data

entered by user(s) in your application.

● Do not transmit plain-text data over the internet.

● Last but not least: ALWAYS LEARN

Matur NuwunSyukron

Thank youArigato Gozaimasu