Oracle Database Security
by David Knox · David Knox
Oracle Press book (published as Effective Oracle Database 10g Security by Design) by an Oracle security architect, covering user authentication, proxy authentication, Virtual Private Database, Label Security, fine-grained auditing and encryption. Readers learn to design layered access controls into Oracle applications from the start.
This link may earn us a small commission at no extra cost to you. Affiliate disclosure
More resources on Database Security
OWASP Foundation
Nonprofit foundation publishing open web application security standards and guides, including the OWASP Top Ten, the Application Security Verification Standard, the Web Security Testing Guide and the Cheat Sheet Series, used to identify, test for and prevent common web vulnerabilities.
OWASP Database Security Cheat Sheet
OWASP guidance on hardening database deployments: isolating the database from the network, encrypting connections, authenticating and storing credentials securely, applying least-privilege permissions, and secure configuration for SQL Server, MySQL, PostgreSQL, MongoDB and Redis. Readers can audit a database setup against concrete controls.
OWASP SQL Injection Prevention Cheat Sheet
OWASP reference on stopping SQL injection in application code. It ranks the primary defenses (parameterized queries, properly built stored procedures, allow-list input validation) over escaping, with code examples in Java, .NET, PHP and other languages, so developers can write and review injection-safe database queries.
Securing SQL Server
A practical guide by a SQL Server MVP to hardening Microsoft SQL Server instances: network configuration, authentication, permissions, encryption, SQL injection defense, auditing and backup security. Readers learn to assess an installation's attack surface and apply concrete configuration changes to reduce it.
SQLShack
Free article library started by ApexSQL, written by SQL Server professionals, covering T-SQL, indexing, query tuning, backup and recovery, high availability, auditing and SSIS. Readers can follow step-by-step examples to administer, secure and tune SQL Server instances.
sqlservercentral.com
SQLServerCentral is a community-driven resource for SQL Server professionals. It offers tutorials, articles, scripts, forums, and news covering SQL Server administration, development, and performance optimization.