RE: Databases

["Benjamin Meade" <ben () lanwest com au>]

Thanks for all your input.

Yes, we had considered Oracle, but the cost ruled it out. Acutally, the
cost of MS SQL also rules it out. I think the end result is going to be
PostgresSQL.

Again, thanks for the help.

Benjamin Meade
System Administrator
LanWest Pty Ltd

-----Original Message-----
From: Roy Liebermann [mailto:Roy () avnet co il] 
Sent: Thursday, 10 April 2003 5:30 PM
To: ben () lanwest com au
Subject: RE: Databases



 Hey there, Benjamin!
The following links include security guides of MSSQL 2k, which to my
opinion is the best from your list....

http://nsa1.www.conxion.com/support/guides/sd-9.pdf 
http://www.nextgenss.com/papers/tp-SQL2000.pdf
http://www.microsoft.com/sql/techinfo/administration/2000/securitywp.asp
?&SD=GN&LN=HE&gssnb=1
 
FOR ANY OTHER QUESTION.......
BTW - Is the absence of Oracle9i database on purpose??
         

        Best Regards,
        Roy Liebermann 
        Senior Information Security Consultant 
        Avnet Deloitte & Touche
        Information Security Ltd . 

        *  +972-3-9560074 (Ext. 115) 
        *  +972-58-337852
        *  Roy () avnet co il
        "   www.avnet.co.il



-----Original Message-----
From: Benjamin Meade [mailto:ben () lanwest com au] 
Sent: Wednesday, April 09, 2003 5:38 AM
To: security-basics () securityfocus com
Subject: Databases



Hey all,

I've been given the task of evaluating various database servers with
regards to security, and would like to solicit opinions. The databases I
am interested in are:

PostgressSQL 7.3
MS SQL Server 2K
Interbase 6 & 7
Sybase 12.5
Access 2K

If anybody has any information, whitepapers, anecdotes etc on securing
these databases, I would be grateful.

PS I know that MS Access and security do not belong in the same
sentence. The order came from on high to include this "as a comparison".

Thanks all,

Benjamin Meade
System Administrator
LanWest Pty Ltd
Ph:  (08) 9440 3033
Fax: (08) 9440 3370



-------------------------------------------------------------------
Is SPAM over-loading your e-mail server, disk space or bandwidth?
SurfControl E-Mail Filter is flexible, intelligent and policy-driven
protection. http://www.securityfocus.com/SurfControl-security-basics2
Download your free fully functional trial, complete with 30-days of free
technical support. Stop SPAM before it stops you.
-------------------------------------------------------------------


-------------------------------------------------------------------
Is SPAM over-loading your e-mail server, disk space or bandwidth?
SurfControl E-Mail Filter is flexible, intelligent and policy-driven
protection.
http://www.securityfocus.com/SurfControl-security-basics2
Download your free fully functional trial, complete with 30-days of free technical support.
Stop SPAM before it stops you.
-------------------------------------------------------------------