Are you using one of the trending NoSQL databases such as MongoDB or CouchDB? Or maybe you are thinking of using one of those but are troubled by how secure they are? We will discuss the security of the application programming interfaces (APIs) and software development kits (SDKs) of NoSQL databases, while also diving into the application code consuming these databases and providing some examples and advice on the risks and mitigations.
NoSQL Databases Still Have Risks
NoSQL, which stands for Not Only SQL, is a common term for nonrelational databases. Among popular NoSQL databases you will find the aforementioned MongoDB and CouchDB, along with Redis, Cassandra and more. NoSQL databases have become increasingly popular thanks to their benefits in particular use cases, especially in big data and real-time Web usages where performance, scalability and flexibility are key.
Top 10 Tips to secure most used NOSQL Database
Good Reads and practical examples.
- https://www.pentestpeople.com/nosql-injection/
- https://www.pentestpeople.com/sql-injection-is-still-an-issue/
- https://www.pentestpeople.com/second-order-sql-injection-part-3-of-the-sql-series/
- https://securityintelligence.com/does-nosql-equal-no-injection/
Categories: Cyber Security, Database security
Leave a Reply