Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

A number of texts signify that the most important aspects offered by a DBMS are availability, integrity and secrecy. As part of a homework assignment I have been tasked with mentioning attacks which would affect each aspect. This is what I have come up with - are they any good?

Availability - DDOS attack Integrity
Secrecy - SQL Injection attack
Integrity - Use of trojans to gain access to objects with higher security roles
share|improve this question

Yes, those examples are applicable to those metrics.

An unrestricted SQL injection attack will often compromise both the confidentiality of the system and the integrity of it, since data in the system can retrieved by the attacker (confidentiality) as well as modified (integrity). However, a properly secured system will often use limited privileges for database users - for instance, if the application user only has SELECT rights, and not any of the modify operations, then the integrity of the system is not at risk.

The CVSS scoring system is a good reference point for the different impacts that a vulnerability can have on a system, and is the industry standard for rating vulnerabilities - it's a good thing to be familiar with!

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.