Is MS SQL server the most secure SQL server?

kgun · #1 (**permalink**) 06-06-2007, 06:55 AM

ramsaytom2 · #2 (**permalink**) 08-07-2007, 06:51 AM

Hi

SQL Server is more secure then Mysql. SQL server has the security of SD3 (Secure By design, Secure by development and secure by deployment).

**wige** · #3 (**permalink**) 08-07-2007, 10:04 AM

No.

A search of the CERT database shows more reported vulnerabilities in MS SQL than MySQL. On the plus side, Oracle seems to be much worse. MySQL being open source also gives it the advantage of community review so that developers and hackers can explore the code and find and patch vulnerabilities before the product ships, reducing the number of vulnerabilities in the final product. But any product, especially one designed to be used on the Internet, will have exploits. The important thing is finding the patches and applying them promptly, as well as ensuring that the application is well protected - direct access to the database is restricted, and all scripts that access the database are secured. I have seen extremely well secured databases that have been wiped out by a user adding a few extra characters to a login screen.

kgun · #4 (**permalink**) 08-07-2007, 10:41 AM

Quote:

Originally Posted by wige

No.
I have seen extremely well secured databases that have been wiped out by a user adding a few extra characters to a login screen.

Extremely well secured?
KW's SQL injection attacks, shared hoster etc.
I am not a specialist, but would apriori think that the Oeacle platform was most secure.
My background: Little Sybase and MySQL, sql database, + database background from ...

**wige** · #5 (**permalink**) 08-07-2007, 10:59 AM

By well secured I mean the database had all the latest patches, remote connections were blocked via the firewall, the access passwords were changed regularly - all of which didn't matter because of a flaw in a web site script.

kgun · #6 (**permalink**) 08-07-2007, 11:12 AM

Related SP thread:

? about p74 of Sitepoint db book