One approach to the testing of security of proposed database application software
Siniša Ilić, Ljubomir Lazić, Petar Spalević · 2011
This paper presents the concept of database configuration and development considering security issues especially when connected to internet. Regardless of precautions on security voulnerabilities implemented on other levels of database environment, such as: network, operating system, client application, it is important to protect database itself by avoiding well known database security issues. In order to prove that proposed configuration has a high level of security protection, security testing has to be performed. The overall goal of security testing is to reduce vulnerabilities within a software system and we have proposed testing methodology including code review and vulnerability assessment that represent the most widespread of best practices for software security assurance.