MySQL claims to be the world’s most popular open source database, and with good
reason. It is free, runs on a wide variety of platforms, is relatively simple, easy to
configure and performs well even under significant load. By comparison to some other
popular database management systems, configuring it is quite simple, but there are still a
sufficiently wide variety of security-relevant configuration issues to make securing it a
challenge.
This document is a brief outline of common attacks on MySQL and the steps that a
MySQL administrator can take to defend against them.
Download: HackproofingMySQL.pdf