Network and Communication Security
There are several components interacting with database system that can be located on different computers and may reside in different communication networks. These components like database administration tools or database applications (for example an SAP system) are transferring data via remote communication channels (TCP/IP, socket communication) to the server where the database system is running. In cases of remote communication these components are connected to a global listener or an installation-specific X server (SAP MaxDB communication server). X server and global listener are running on the database systems computer. They are tunneling the transfered data to the corresponding database.
Hazards
-
Data is intercepted or modified
Unauthorized persons intercept or modify data while it is being transferred between computers.
-
Unauthorized access to the database computer via the network
Unauthorized persons exploit security gaps in other programs to gain access to the database computer via a network connection.