Acrobat X Files

Home > Hacking > Server Hacking

Hacking databases for owning your data

Sort Desciption:

MS SQL Server Attacks. Live MS SQL Server Database hacking. Stealing a complete database from Internet. Stealing data from Internet with a couple of ...

Content Inside:

Hacking databases for owning your dataPage 1Hacking databases for owningyour dataCesar CerrudoCesar CerrudoEsteban Martinez FayoEsteban Martinez FayoArgeniss (www.argeniss.com)Argeniss (www.argeniss.com)Page 2OverviewIntroductionWhy database security?How databases are hacked?Oracle Database Server attacksMS SQL Server attacksHow to protect against attacks?ConclusionsReferencesPage 3Introduction By one estimate 53 million people have had dataabout themselves exposed over the past 13 months.(InformationWeek 03/20/2006) This is old news right now the number is > 100 million !!! Data theft is becoming a major threat. Criminals have identified where the gold is. In the last year many databases from fortune 500companies were compromised. As we will see compromising databases is not bigdeal if they haven't been properly secured.Page 4IntroductionPage 5Introduction Want to be more scared?Chronology of Data Breaches http://www.privacyrights.org/ar/ChronDataB reaches.htmSome estimated money losses ChoicePoint: $15 million B.J.'s Wholesale: $10 million Acxiom: $850000 Providence Health System: $9 millionPage 6IntroductionOpenmarketpricing ofpersonaldata fromSwipeToolkitHow much personal data worth?Page 7Why Database security? Databases are were your most valuable data rest Corporate data. Customer data. Financial data. etc. If your databases don't work then your companywon't work Try to do a quick estimation of how much money you willlose if your databases don't work for a couple of hours aday etc. If your databases are hacked then your company canrun out of business or you can lose millions.Page 8Why Database security? You must comply with regulations laws etc. Sarbanes Oxley (SOX). Payment Card Industry (PCI) Data Security Standard. Healthcare Services (HIPAA) . Financial Services (GLBA) . California Senate Bill No. 1386 . Data Accountability and Trust Act (DATA). Etc.Page 9Why Database security? Database vulnerabilities affect all database vendors Some vendors (like Oracl ...

Source: www.blackhat.com

 

Related Files

Vlandriks Ultimate Guide - Hacking Source Forum

Filed under: Hacking and Server Hacking
Sideshow ( Log Out ) Options Aug 13 2006, 08:54 PM My Controls · View New Posts · My Assistant Hacking Source Forum » World of Warcraft » World of Warcraft Server Emulation Vlandriks Ultimate Guide ...

Hacking Techniques

Filed under: Hacking and Server Hacking
Hacking Techniques. Network based System Hacking. Web Server Hacking. Physically enter the Target Building. WLAN (Wireless LAN) Hacking ...

Web Hacking

Filed under: Hacking and Server Hacking
This labs focus will in be web server hacking. Web server hacking refers to attackers. taking advantage of vulnerabilities inherent to the web server ...

Hacking SQL Server

Filed under: Hacking and Server Hacking
Hacking / Hacking Exposed Windows Server 2003: Windows Security Secrets & Solutions / Scambray ...... some of the tools of the trade in SQL Server hacking. ...

Real Time Hacking : ISA Server

Filed under: Hacking and Server Hacking
This case study is entirely based on my hacking experiences with Microsoft ISA Servers.It gives you. people with the way to get related to the ISA server ...