Database Security

Database security protects stored data from unauthorized access, modification, and exfiltration. It covers authentication, authorization, encryption at rest and in transit, auditing, injection prevention, and the principle of least privilege applied to database accounts and roles.

itDatabases and data storage

Database Security

Database security keeps data confidential, correct, and available to authorized work. It also makes actions traceable when you need to investigate a mistake or attack.

The database is only one part of that job. Data moves through applications, drivers, networks, database processes, storage, logs, backups, and administrator tools. A weakness at any boundary can undermine controls elsewhere.

This course gives you a practical way to reason about those boundaries. You will learn to reduce exposure, separate identities, limit privileges, prevent injection, protect data, and preserve useful evidence.

Start with data and paths

Begin with the data, not a product setting.

Identify what the database holds. Classify the harm from unauthorized disclosure, modification, deletion, or loss of access. Include replicas, exports, logs, temporary files, snapshots, and backups.

Then map every path to that data:

application and service connections;
administrator and support access;
replication and backup channels;
monitoring, analytics, and export jobs;
database management interfaces;
storage and key-management systems.

Each path creates a trust boundary. Record who or what crosses it, how identity is checked, what access follows, and what evidence remains.

Use layers with different jobs

Database security works as a set of independent controls.

Database Security

Start with data and paths

Use layers with different jobs

Relevant careers