PostgreSQL Security. How Do We Think?
summary
Uses PostgreSQL in enterprise and security-critical environments, focusing on securing databases (encryption, key management, identity management, auditing) and the current state of PostgreSQL auditing. Describes practical considerations and remaining challenges when building PostgreSQL systems to meet standards like PCI DSS, and introduces a forked, enhanced version of pgaudit that separates audit/server logs and audits superuser activity.
AI-written summary · about
chapters (7)
- 0:00Start
- 4:11What is PCI DSS?
- 6:51ii. Encryption and Key Management
- 13:18ii. Data Encryption and Key Management
- 21:07iv. Audit
- 33:43Example use case
- 44:22NTT pgaudit! Why not?
related talks
07mAll about Postgres security
50mSecuring PostgreSQL
38mPostgreSQL and DevSecOps: Ensuring database security
40mPoastgreSQL Auditing, Authentication, and Security
40mPostgreSQL Security for Application Developers
32mEnhancing Security in PostgreSQL
52mSecuring PostgreSQL - Exploring the PostgreSQL STIG and Beyond
40mPostgreSQL and DevSecOps Ensuring database security in DevSecOps