Improving Web Application Security: Threats and - CGISecurity

Chapter 18: Securing Your Database Server 537Perform Regular BackupsYou must be able to restore data in the event of a compromise. If you have a recoverysystem in place, test it before you actually need it. The first time you need to recoverdata should not be the first time you test your backup and restore process. For moreinformation on backing up and restoring SQL Server, see the following resources:● SQL Server 2000 documentation, “Backing Up and Restoring Databases”● “Backup and Restore Strategies with SQL Server 2000,” by Rudy Lee Martinez,http://www.dell.com/us/en/biz/topics/power_ps4q00-martin.htmAudit Group MembershipKeep track of user group membership, particularly for privileged groups such asAdministrators. The following command lists the members of the Administratorsgroup:net localgroup administratorsMonitor Audit LogsMonitor audit logs regularly and analyze the log files by manually viewing them oruse the technique described in Microsoft Knowledge Base article 296085, “How To:Use SQL Server to Analyze Web Logs.”Stay Current with Service Packs and PatchesSet up a schedule to analyze your server’s software and subscribe to security alerts.Use MBSA to regularly scan your server for missing patches. The following linksprovide the latest updates:● Windows 2000 service packs. The latest service packs are listed athttp://www.microsoft.com/windows2000/downloads/servicepacks/default.asp.●●Critical updates. These updates help to resolve known issues and help protectyour computer from known security vulnerabilities. For the latest critical updates,see http://www.microsoft.com/windows2000/downloads/critical/default.asp.Advanced security updates. Also monitor the advanced security updates athttp://www.microsoft.com/windows2000/downloads/security/default.asp.These also help protect your computer from known security vulnerabilities.