6 - Database Security

Question 1

SQL injection

Answer 1

Malicious SQL commands sent to database

Takes advantage of vulnerabilities in web app (script building query from user input)

Input checking and prepared statements can prevent

Question 2

Inference attacks

Answer 2

Combining databases that share attributes

Getting information that is inferred by some data

Must remove identifying information