Security Basics mailing list archives

RE: Limiting application's database size


From: "Griffiths, Ian" <Ian.Griffiths () liv-coll ac uk>
Date: Mon, 28 Jun 2004 17:56:27 +0100

I might be barking up the wrong tree but you have another layer of protection in partitioning your file system.  Its 
certainly not the only line of defence that you should employ but it would certainly keep the server running.
 
-----Original Message----- 
From: Thorpe, Jason (TAD) [mailto:Jason.Thorpe () fta dot gov] 
Sent: Mon 28/06/2004 14:03 
To: webappsec () securityfocus com; security-basics () securityfocus com 
Cc: 
Subject: Limiting application's database size



        I have a database server that contains several applications.  One of the
        applications allow users to enter information into the database without
        being authenticated.  My concern is that a malicious script could quickly
        increase the size of the database and thus taking all free disk space on the
        server.  Is there a way to limit the size of the database so that it will
        not affect the other applications?  Or does anybody have any suggestions on
        a way to handle this situation.
        
        DB Server: MS SQL Server, IIS
        
        
        
        


Current thread: