Dear Friends
you can read a lot of books, material, publications to own your knowledge base, but most of professional DB security analysers and most of DB security companies use Ron Ben Natan book (Implementing Database Security and Auditing) as main reference because it contains simple and practical materials for most database used (Oracle, Sybase, DB2, MS SQL and MySQL) , you can consider this book as your first reference but it's not the last, but you have to understand it well, mainly look at the concept and try to read it 3 times with LAP.

below is the link in my google document account:
 http://docs.google.com/fileview?id=0B6l0Toe9ijjPOGIxYTEwNjktMzdjNy00M2NjLTk3YzctNDhlOWRmMjBhNjRm&hl=en&authkey=CMzEgoUF


goto above link and download the file, to start discuss the introduction in chapter 1 and the concept of defence-in-depth strategy.

Awaiting for your feedback

Thank you
Mohamed

It does need reply it needs saying Milions of Thanks

dear Respected team
let's download the book and interact with Chapter 1

regards,

Thank you very much

go on iam with you

Hossam

تم تعديل 10 أغسطس 201015 سنة بواسطة ENG_HOSSAM_WALLY

Dear Brothers
Kindly read chapters 1 and 2 to start discussion
let's try to understand Defence-in-Depth concept first.
you can get additional material for Depth-in-Defence here:
 http://securedb.blogspot.com/2010/07/introduction-area-of-it-security-is-one.html


Kindly try to use only official materials from DISA (US Defence Information System Agency) or www.sans.org

Kindly note we are gonna discuss Defence-in-Depth strategy.


Thank you

Salam
Ramadan Kareem

If you start reading above book, you can use this material to understand the Desfense-in-Depth strategy

Kindly download from this link:
http://docs.google.com/fileview?id=0B6l0Toe9ijjPYjhmMGQwZDAtN2I0My00OGUxLWIyMDYtMzMyOGE4MDFlOGZk&hl=en&authkey=CI7Jt8IB


Now the question is
You have internal network LAN and DMZ, suggest the secure location for your database server.... LAN or DMZ?
we are gonna apply this simple model for small business database , obviously the enterprise DB use same roles.

Thank you
Mohamed