دانلود کتاب امنیت پایگاه داده و اپلیکیشن

After working in the IT field for over 20 years, the idea to put into words what I have learned took shape. I started creating my own lists of “to do’s” while developing a DB or an application. These to-do lists started to become large and routine processes due to developments in the IT field. Certifications such as Sec+, CISSP, and ITIL have become mandatory requirements in various organizations for developers, DB, and system administrators. After working with various people who implemented security religiously and those who ignored the security part with equal vigor, I felt it was time to put my to-do lists into the form of a book. The result is the book you have in your hands. Since security details need to be mentioned before they are implemented, the first section goes over the fundamentals of cybersecurity. As you will read in this book, security is never a one-person job. Therefore, after discussing DB security and application security, I added a fourth section on security administration to give details of corporate security in action. All aspects of security are discussed in the last section to give the reader an idea of how cybersecurity aligns with corporate security, IT security, and physical security. This book is for IT professionals who want to learn how to secure their DB or their applications with a multi-pronged stature. System administrators can use this book in securing their hosts, creating firewall rules, and hardening the IIS side of hosting an application. The book might be helpful in learning security of software and DBs and may help with Sec+ and CISSP certifications. The book should be used at every stage of the software or DB development process to create a strong cybersecurity posture. It also helps in learning the fundamentals for an aspiring student in IT and cybersecurity. The book touches on both Oracle and SQL Server software. Any programming language security can be achieved with applications by incorporating the methods discussed in this book. Students can learn about change management and its process before they enter a corporate environment. Parts of the book also discuss steps for taking care of mobile devices and BYOD at an office. This book could also be used for a general audience to understand the attacks that exist in DB and applications and learn how to prevent those attacks.