Unauthorized access to reusable client authentication information.Unauthorized access to by monitoring the access of others.Unauthorized access to data via user based applications.Unauthorized Access to dataĪnother type of attack is gaining unauthorized access to data within an application or database system. Applications can also be attacked in ways that render the application, and sometimes the entire machine, unusable. In this type of attack, an attacker makes a database system or application resource unavailable to its legitimate users.

In this attack, a user already has some access in the database system and he only tries to elevate this access higher level so that he/she can perform some unauthorized activities in database system. To prevent this, user inputs fields should be carefully handled. This attack takes advantage of loopholes in implementation of user applications. This is most common type of attack in a database system where malicious SQL statements are inserted in the database system and are executed to get critical information from the database system. Types of Threats on a Database System SQL Injection Given below are the primary objectives of performing database security testing −

Security testing defines a way to identify potential vulnerabilities effectively, when performed regularly. The main target of database security testing is to find out vulnerabilities in a system and to determine whether its data and resources are protected from potential intruders. Database security testing is done to find the loopholes in security mechanisms and also about finding the vulnerabilities or weaknesses of database system.

Sql injection tool for mac