{"id":2550,"date":"2014-08-27T18:00:37","date_gmt":"2014-08-27T22:00:37","guid":{"rendered":"http:\/\/sqlity.net\/en\/?p=2550"},"modified":"2014-11-26T18:02:04","modified_gmt":"2014-11-26T23:02:04","slug":"unprotected-network","status":"publish","type":"post","link":"https:\/\/sqlity.net\/en\/2550\/unprotected-network\/","title":{"rendered":"Common Database Vulnerabilities: Unprotected Network"},"content":{"rendered":"
\n

\nThe network is not an integral part of the database management system. So why is an unprotected network listed as a database vulnerability?\n<\/p>\n

The Two Levels of Database Network Security<\/h3>\n
\n\"Unprotected<\/a>\n<\/div>\n

\nAs someone owning or administrating a database server, you need to be aware of the common threads to your entire system. While you can argue, that the network is someone else's responsibility, that would overly simplify the matter.\n<\/p>\n

\nI assume that your database server is behind the company firewall and not directly accessible from the internet. Having a database server that is accessible directly from the public internet is considered a bad practice. If you are in that position I urge you to revisit your application architecture.\n<\/p>\n

\nIf your server is behind the firewall, then network security means that you need to protect your network to keep intruders out. That indeed is not the job of the database administrator (unless the database administrator is also the network administrator). However, there is an important second part to this equation.\n<\/p>\n

\nMost database servers including SQL Server by default communicate with their clients in an unprotected fashion. That means that a person with malicious intent can intercept all communication between the server and the client while on the same network. If he can witness an authentication handshake, the intruder can even take over an entire session and run his own commands against the database server with all the permissions granted to the intercepted user.\n<\/p>\n

Network Encryption to the Rescue<\/h3>\n

\nFor the above attack scenario to work, the intruder has to be connected to the same network as the database server. Therefore, you might think that you are safe, as your database servers are behind a firewall. However, roughly 80% of all attacks are (intentionally or unintentionally) executed by insiders (employees), that means by people that are already behind that same firewall. <\/p>\n

\nEnabling TLS (Transport Layer Security<\/a>) for your database server can go a long way in tightening your network security and preventing these types of attack. If you have not done so yet, now is the time to take action. Enable Encrypted Connections to your Database Engine<\/a> now.\n<\/p>\n

The Most Common Database Problems<\/h3>\n

\nAn Unprotected Network is one of the most commonly encountered database vulnerabilities. In this series of posts, I discuss 10 of them. Below are the ones that are published so far:\n<\/p>\n

\n
\n

Common Database Vulnerabilities: Privilege Abuse<\/a><\/h2>\n
<\/div>\n<\/div>\n
\n

Common Database Vulnerabilities: SQL Injection<\/a><\/h2>\n
<\/div>\n<\/div>\n
\n

Common Database Vulnerabilities: Unprotected Network<\/a><\/h2>\n
<\/div>\n<\/div>\n
\n

Common Database Vulnerabilities: Inadequate Patch Management<\/a><\/h2>\n
<\/div>\n<\/div>\n
\n

Common Database Vulnerabilities: Backup Data Exposure<\/a><\/h2>\n
<\/div>\n<\/div>\n
\n

Common Database Vulnerabilities: Missing Segregation<\/a><\/h2>\n
<\/div>\n<\/div>\n
\n

Common Database Vulnerabilities: Flawed Key Management<\/a><\/h2>\n
<\/div>\n<\/div>\n
\n

Common Database Vulnerabilities: Weak Audit Trail<\/a><\/h2>\n
<\/div>\n<\/div>\n
\n

Common Database Vulnerabilities: Data Inference<\/a><\/h2>\n
<\/div>\n<\/div>\n
\n

Common Database Vulnerabilities: Defects<\/a><\/h2>\n
<\/div>\n<\/div>\n<\/div>\n\n<\/div>\n","protected":false},"excerpt":{"rendered":"

Database network security is affected by the physical security of the network itself, but also by the security of the communication between the database server and the client. Do not make the mistake to think that network security is not your responsibility. Read on to discover the one thing you have to do now to protect the communication of your database server over the network.<\/p>\n

[more…]<\/a><\/p>\n","protected":false},"author":3,"featured_media":2551,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":false,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2},"jetpack_post_was_ever_published":false},"categories":[222,5,34,27],"tags":[226,227,38,15],"class_list":["post-2550","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-common-database-vulnerabilities","category-general","category-security","category-series","tag-network","tag-network-security","tag-security-2","tag-sql-server"],"acf":[],"yoast_head":"\nCommon Database Vulnerabilities: Unprotected Network - sqlity.net<\/title>\n<meta name=\"description\" content=\"Database Network Security is affected by two areas. Discover what they are and how you can establish a safe environment for your databases.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/sqlity.net\/en\/2550\/unprotected-network\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Common Database Vulnerabilities: Unprotected Network - sqlity.net\" \/>\n<meta property=\"og:description\" content=\"Database Network Security is affected by two areas. Discover what they are and how you can establish a safe environment for your databases.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/sqlity.net\/en\/2550\/unprotected-network\/\" \/>\n<meta property=\"og:site_name\" content=\"sqlity.net\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/sqlity.net\" \/>\n<meta property=\"article:published_time\" content=\"2014-08-27T22:00:37+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2014-11-26T23:02:04+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/sqlity.net\/wp-content\/uploads\/2014\/08\/unprotected-network.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"300\" \/>\n\t<meta property=\"og:image:height\" content=\"450\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Sebastian Meine\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@sqlity\" \/>\n<meta name=\"twitter:site\" content=\"@sqlity\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Sebastian Meine\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/sqlity.net\\\/en\\\/2550\\\/unprotected-network\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/sqlity.net\\\/en\\\/2550\\\/unprotected-network\\\/\"},\"author\":{\"name\":\"Sebastian Meine\",\"@id\":\"https:\\\/\\\/sqlity.net\\\/en\\\/#\\\/schema\\\/person\\\/bcffd8c572bc2f1bd10fdba80135e53c\"},\"headline\":\"Common Database Vulnerabilities: Unprotected Network\",\"datePublished\":\"2014-08-27T22:00:37+00:00\",\"dateModified\":\"2014-11-26T23:02:04+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/sqlity.net\\\/en\\\/2550\\\/unprotected-network\\\/\"},\"wordCount\":425,\"commentCount\":0,\"image\":{\"@id\":\"https:\\\/\\\/sqlity.net\\\/en\\\/2550\\\/unprotected-network\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/sqlity.net\\\/wp-content\\\/uploads\\\/2014\\\/08\\\/unprotected-network.jpg\",\"keywords\":[\"network\",\"network security\",\"security\",\"SQL Server\"],\"articleSection\":[\"Common Database Vulnerabilities\",\"General\",\"Security\",\"Series\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/sqlity.net\\\/en\\\/2550\\\/unprotected-network\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/sqlity.net\\\/en\\\/2550\\\/unprotected-network\\\/\",\"url\":\"https:\\\/\\\/sqlity.net\\\/en\\\/2550\\\/unprotected-network\\\/\",\"name\":\"Common Database Vulnerabilities: Unprotected Network - sqlity.net\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/sqlity.net\\\/en\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/sqlity.net\\\/en\\\/2550\\\/unprotected-network\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/sqlity.net\\\/en\\\/2550\\\/unprotected-network\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/sqlity.net\\\/wp-content\\\/uploads\\\/2014\\\/08\\\/unprotected-network.jpg\",\"datePublished\":\"2014-08-27T22:00:37+00:00\",\"dateModified\":\"2014-11-26T23:02:04+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/sqlity.net\\\/en\\\/#\\\/schema\\\/person\\\/bcffd8c572bc2f1bd10fdba80135e53c\"},\"description\":\"Database Network Security is affected by two areas. Discover what they are and how you can establish a safe environment for your databases.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/sqlity.net\\\/en\\\/2550\\\/unprotected-network\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/sqlity.net\\\/en\\\/2550\\\/unprotected-network\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/sqlity.net\\\/en\\\/2550\\\/unprotected-network\\\/#primaryimage\",\"url\":\"https:\\\/\\\/sqlity.net\\\/wp-content\\\/uploads\\\/2014\\\/08\\\/unprotected-network.jpg\",\"contentUrl\":\"https:\\\/\\\/sqlity.net\\\/wp-content\\\/uploads\\\/2014\\\/08\\\/unprotected-network.jpg\",\"width\":300,\"height\":450,\"caption\":\"Unprotected Network\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/sqlity.net\\\/en\\\/2550\\\/unprotected-network\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/sqlity.net\\\/en\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Common Database Vulnerabilities: Unprotected Network\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/sqlity.net\\\/en\\\/#website\",\"url\":\"https:\\\/\\\/sqlity.net\\\/en\\\/\",\"name\":\"sqlity.net\",\"description\":\"Quality for SQL\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/sqlity.net\\\/en\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/sqlity.net\\\/en\\\/#\\\/schema\\\/person\\\/bcffd8c572bc2f1bd10fdba80135e53c\",\"name\":\"Sebastian Meine\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/4ab0a6d02dd494849a584a2c3c8bc3bdcef1d0aa5f87e98bf905dbdb9ad2ce3a?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/4ab0a6d02dd494849a584a2c3c8bc3bdcef1d0aa5f87e98bf905dbdb9ad2ce3a?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/4ab0a6d02dd494849a584a2c3c8bc3bdcef1d0aa5f87e98bf905dbdb9ad2ce3a?s=96&d=mm&r=g\",\"caption\":\"Sebastian Meine\"},\"sameAs\":[\"http:\\\/\\\/sqlity.net\",\"https:\\\/\\\/x.com\\\/sqlity\"]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Common Database Vulnerabilities: Unprotected Network - sqlity.net","description":"Database Network Security is affected by two areas. Discover what they are and how you can establish a safe environment for your databases.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/sqlity.net\/en\/2550\/unprotected-network\/","og_locale":"en_US","og_type":"article","og_title":"Common Database Vulnerabilities: Unprotected Network - sqlity.net","og_description":"Database Network Security is affected by two areas. Discover what they are and how you can establish a safe environment for your databases.","og_url":"https:\/\/sqlity.net\/en\/2550\/unprotected-network\/","og_site_name":"sqlity.net","article_publisher":"https:\/\/www.facebook.com\/sqlity.net","article_published_time":"2014-08-27T22:00:37+00:00","article_modified_time":"2014-11-26T23:02:04+00:00","og_image":[{"width":300,"height":450,"url":"https:\/\/sqlity.net\/wp-content\/uploads\/2014\/08\/unprotected-network.jpg","type":"image\/jpeg"}],"author":"Sebastian Meine","twitter_card":"summary_large_image","twitter_creator":"@sqlity","twitter_site":"@sqlity","twitter_misc":{"Written by":"Sebastian Meine","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/sqlity.net\/en\/2550\/unprotected-network\/#article","isPartOf":{"@id":"https:\/\/sqlity.net\/en\/2550\/unprotected-network\/"},"author":{"name":"Sebastian Meine","@id":"https:\/\/sqlity.net\/en\/#\/schema\/person\/bcffd8c572bc2f1bd10fdba80135e53c"},"headline":"Common Database Vulnerabilities: Unprotected Network","datePublished":"2014-08-27T22:00:37+00:00","dateModified":"2014-11-26T23:02:04+00:00","mainEntityOfPage":{"@id":"https:\/\/sqlity.net\/en\/2550\/unprotected-network\/"},"wordCount":425,"commentCount":0,"image":{"@id":"https:\/\/sqlity.net\/en\/2550\/unprotected-network\/#primaryimage"},"thumbnailUrl":"https:\/\/sqlity.net\/wp-content\/uploads\/2014\/08\/unprotected-network.jpg","keywords":["network","network security","security","SQL Server"],"articleSection":["Common Database Vulnerabilities","General","Security","Series"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/sqlity.net\/en\/2550\/unprotected-network\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/sqlity.net\/en\/2550\/unprotected-network\/","url":"https:\/\/sqlity.net\/en\/2550\/unprotected-network\/","name":"Common Database Vulnerabilities: Unprotected Network - sqlity.net","isPartOf":{"@id":"https:\/\/sqlity.net\/en\/#website"},"primaryImageOfPage":{"@id":"https:\/\/sqlity.net\/en\/2550\/unprotected-network\/#primaryimage"},"image":{"@id":"https:\/\/sqlity.net\/en\/2550\/unprotected-network\/#primaryimage"},"thumbnailUrl":"https:\/\/sqlity.net\/wp-content\/uploads\/2014\/08\/unprotected-network.jpg","datePublished":"2014-08-27T22:00:37+00:00","dateModified":"2014-11-26T23:02:04+00:00","author":{"@id":"https:\/\/sqlity.net\/en\/#\/schema\/person\/bcffd8c572bc2f1bd10fdba80135e53c"},"description":"Database Network Security is affected by two areas. Discover what they are and how you can establish a safe environment for your databases.","breadcrumb":{"@id":"https:\/\/sqlity.net\/en\/2550\/unprotected-network\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/sqlity.net\/en\/2550\/unprotected-network\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/sqlity.net\/en\/2550\/unprotected-network\/#primaryimage","url":"https:\/\/sqlity.net\/wp-content\/uploads\/2014\/08\/unprotected-network.jpg","contentUrl":"https:\/\/sqlity.net\/wp-content\/uploads\/2014\/08\/unprotected-network.jpg","width":300,"height":450,"caption":"Unprotected Network"},{"@type":"BreadcrumbList","@id":"https:\/\/sqlity.net\/en\/2550\/unprotected-network\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/sqlity.net\/en\/"},{"@type":"ListItem","position":2,"name":"Common Database Vulnerabilities: Unprotected Network"}]},{"@type":"WebSite","@id":"https:\/\/sqlity.net\/en\/#website","url":"https:\/\/sqlity.net\/en\/","name":"sqlity.net","description":"Quality for SQL","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/sqlity.net\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/sqlity.net\/en\/#\/schema\/person\/bcffd8c572bc2f1bd10fdba80135e53c","name":"Sebastian Meine","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/4ab0a6d02dd494849a584a2c3c8bc3bdcef1d0aa5f87e98bf905dbdb9ad2ce3a?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/4ab0a6d02dd494849a584a2c3c8bc3bdcef1d0aa5f87e98bf905dbdb9ad2ce3a?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/4ab0a6d02dd494849a584a2c3c8bc3bdcef1d0aa5f87e98bf905dbdb9ad2ce3a?s=96&d=mm&r=g","caption":"Sebastian Meine"},"sameAs":["http:\/\/sqlity.net","https:\/\/x.com\/sqlity"]}]}},"jetpack_publicize_connections":[],"jetpack_featured_media_url":"https:\/\/sqlity.net\/wp-content\/uploads\/2014\/08\/unprotected-network.jpg","jetpack_sharing_enabled":true,"jetpack_shortlink":"https:\/\/wp.me\/p2wXuw-F8","jetpack-related-posts":[],"_links":{"self":[{"href":"https:\/\/sqlity.net\/en\/wp-json\/wp\/v2\/posts\/2550","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/sqlity.net\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/sqlity.net\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/sqlity.net\/en\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/sqlity.net\/en\/wp-json\/wp\/v2\/comments?post=2550"}],"version-history":[{"count":0,"href":"https:\/\/sqlity.net\/en\/wp-json\/wp\/v2\/posts\/2550\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/sqlity.net\/en\/wp-json\/wp\/v2\/media\/2551"}],"wp:attachment":[{"href":"https:\/\/sqlity.net\/en\/wp-json\/wp\/v2\/media?parent=2550"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/sqlity.net\/en\/wp-json\/wp\/v2\/categories?post=2550"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/sqlity.net\/en\/wp-json\/wp\/v2\/tags?post=2550"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}