Data Security - Advanced course

Goals

This course is intended for people who want to learn about basic data security skills. The aim is to present the management methods and lifecycle of the data, roles, responsibilities and security needs by functional and technical managers.

In addition, the course will introduce you to areas of knowledge related to data protection, including the risks, threats and essential controls to be put in place. It also deals with data access security and backups, as well as data design and common protection methodologies.

Prerequisite

Knowing the basics about IT security or having taken an introductory course beforehand.

Contents

The basics

• Compliance /GDPR
• Roles and Responsibilities / Rights / Obligations
• Data Management Framework

Policies, data classification

The data lifecycle

Risk management

Threats at the database level

• Attack by inference
• SQL injections
• XSS breach
• Code injection
• Server control gain
• Buffer overshoot
• Corrective management
• Denial of service

Cryptography and DB

Security checks

• IAM
• AuthN
• AuthZ
• Audit

The security of backups

Database design

• Normal syntax
• Primary key
• Foreign key
• Constraints
• Index

PostgreSQL Installation & Architecture

• PostgreSQL Security
• Post SQL Surveillance
• Post SQL Secure Development

Other databases

• Oracle
• Mysql
• Access
• Cloud-hosted databases
• Appropriate measures needed/planned in connection with GDPR compliance (anonymization, pseudonymization)
• Default security