Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

A number of texts signify that the most important aspects offered by a DBMS are availability, integrity and secrecy. As part of a homework assignment I have been tasked with mentioning attacks which would affect each aspect. This is what I have come up with - are they any good?

Availability - DDOS attack Integrity
Secrecy - SQL Injection attack
Integrity - Use of trojans to gain access to objects with higher security roles
share|improve this question
add comment

1 Answer

Yes, those examples are applicable to those metrics.

An unrestricted SQL injection attack will often compromise both the confidentiality of the system and the integrity of it, since data in the system can retrieved by the attacker (confidentiality) as well as modified (integrity). However, a properly secured system will often use limited privileges for database users - for instance, if the application user only has SELECT rights, and not any of the modify operations, then the integrity of the system is not at risk.

The CVSS scoring system is a good reference point for the different impacts that a vulnerability can have on a system, and is the industry standard for rating vulnerabilities - it's a good thing to be familiar with!

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.