State of MySQL Security in 2021
summary
MySQL 8.0 is the baseline for 2021 security with concrete features: roles support for simpler privilege management, dynamic privileges to avoid excessive SUPER grants, and caching_sha2_password auth (migrate clients off old modes). TLS gains include require_secure_transport and live certificate reloads without restart. Defend against the biggest risks—SQL injection and exposed internet servers used by ransomware bots—by encrypting client traffic, encrypting backups and test data, using key management (HashiCorp or enterprise KMS), auditing plugins, ProxySQL or Enterprise Firewall for query filtering, and Percona XtraBackup for encrypted backups.
AI-written summary · about
chapters (14)
- 0:00Introduction and welcome
- 1:03Why MySQL security matters
- 3:52Key risks for breaches
- 9:11Application vulnerabilities
- 12:00SQL injection risks
- 14:27Application server hacks
- 15:52Direct database access
- 17:40Network traffic exposure
- 19:03Test databases and backups
- 21:52Roles and responsibilities
- 23:38MySQL 8.0 security features
- 30:20Q&A on prevalent attacks
- 31:45Additional MySQL 8.0 features
- 37:27Q&A on security practices
related talks
22mAn Overview of Security Features in MySQL 5.7
20mHardening MySQL: MySQL Security Basics - MySQL security Tutorial
38mRunning MySQL & MariaDB Server securely in 2019
36mOMG MySQL 8.0 is out! Are we there yet?
53mWhy are we excited about MySQL 8?
40mImproving Observability, Reliability, and Security of Relational Database...
52mWhat's New in MySQL 8.0?
37m8.0 New Features