Today, large amounts of data are being continuously produced, collected, and exchanged between systems. As the number of devices, systems and data produced grows up, the risk of security breaches increases. This is all the more relevant in times of COVID-19, which has affected not only the health and lives of human beings' but also the lifestyle of society, i.e., the digital environment has replaced the physical. This has led to an increase in cyber security threats of various nature. While security breaches and different security protection mechanisms have been widely covered in the literature, the concept of a primitive artifact such as data management system seems to have been more neglected by researchers and practitioners. But are data management systems always protected by default? Previous research and regular updates on data leakages suggest that the number and nature of these vulnerabilities are high. It also refers to little or no DBMS protection, especially in case of NoSQL, which are thus vulnerable to attacks. The aim of this paper is to examine whether traditional vulnerability registries provide a sufficiently comprehensive view of DBMS security, or they should be intensively and dynamically inspected by DBMS owners by referring to Internet of Things Search Engines moving towards a sustainable and resilient digitized environment. The paper brings attention to this problem and makes the reader think about data security before looking for and introducing more advanced security and protection mechanisms, which, in the absence of the above, may bring no value.
翻译:今天,大量数据正在不断产生、收集和交换各种系统。随着所制作的装置、系统和数据数量的增加,安全漏洞的风险增加。在COVID-19时代,这一点更加相关,不仅影响到人类的健康和生命,而且影响到社会的生活方式,即数字环境取代了物质。这导致各种性质的网络安全威胁的增加。尽管文献中广泛涵盖了安全违规行为和不同安全保护机制的概念,但诸如数据管理系统等原始文物的概念似乎被研究人员和从业人员更加忽视。但数据管理系统总是受到默认的保护吗?以前关于数据泄漏的研究和定期更新表明,这些脆弱性的数量和性质都很高。它还提到DBMSS保护很少或根本没有DBMS保护,特别是在NOSQL的情况下,因此很容易受到攻击。本文件的目的是审查传统的脆弱性登记册是否为DBMS安全提供了足够全面的视角,或者它们应该由DBMS系统所有者进行密集和动态的检查,在互联网上提及这些搜索引擎的高级搜索引擎之前,将数据转向更具有可持续性和更高的安全性、更先进的安全性的环境。