So as I understand it database hardening is a process in which you remove the vulnerabilities that result from lax con-figuration options. This can sometimes compensate for exploitable vendor bugs.
Three main stages exist in hardening a database:
- Locking down access to resources that can be misused.
- Disabling functions that are not required.
- Principle of least authority or least privileges.
There is a wealth of information for "locking down" RDBMS environments to harden them against attacks. However these resources don’t provide enough context on current exploitations for databases (if you don’t know what types of attacks exist and which ones are popular, how do you know if your hardening measures are going to provide protection).
A bad way for me to begin learning hardening techniques would be to list as many database exploitations out there and learning how each and every one of them work, that could take... a very long time.
So I am wondering where I can begin, resources available and current trends etc.