Today, large amounts of data are being continuously produced, collected, and exchanged between systems. As the number of devices, systems and data produced grows up, the risk of security breaches increases. This is all the more relevant in times of COVID-19, which has affected not only the health and lives of human beings' but also the lifestyle of society, i.e., the digital environment has replaced the physical. This has led to an increase in cyber security threats of various nature. While security breaches and different security protection mechanisms have been widely covered in the literature, the concept of a primitive artifact such as data management system seems to have been more neglected by researchers and practitioners. But are data management systems always protected by default? Previous research and regular updates on data leakages suggest that the number and nature of these vulnerabilities are high. It also refers to little or no DBMS protection, especially in case of NoSQL, which are thus vulnerable to attacks. The aim of this paper is to examine whether traditional vulnerability registries provide a sufficiently comprehensive view of DBMS security, or they should be intensively and dynamically inspected by DBMS owners by referring to Internet of Things Search Engines moving towards a sustainable and resilient digitized environment. The paper brings attention to this problem and makes the reader think about data security before looking for and introducing more advanced security and protection mechanisms, which, in the absence of the above, may bring no value.
翻译:如今,海量数据在系统间持续产生、收集和交换。随着设备、系统及数据量的增长,安全漏洞风险亦随之上升。在新冠疫情背景下,这一挑战尤为突出——疫情不仅影响了人类健康与生命安全,更改变了社会生活方式:数字环境已取代物理环境。这导致各种性质的网络安全威胁激增。虽然文献广泛探讨了安全漏洞与各类防护机制,但诸如数据管理系统这类基础构件却似乎被研究人员和实践者相对忽视。然而,数据管理系统是否天生具备安全性?过往研究及不断更新的数据泄露报告表明,此类系统的漏洞数量庞大且形式多样。同时,数据库管理系统(尤其是NoSQL系统)普遍存在防护不足甚至缺失的问题,极易遭受攻击。本文旨在探究传统漏洞注册库能否提供足够全面的DBMS安全视图,抑或需要DBMS所有者通过物联网搜索引擎进行深度动态监控,以构建可持续且具备韧性的数字化环境。本文致力于引起学界对该问题的重视,促使读者在寻求并引入更高级的安全防护机制之前,优先思考数据安全——因为若缺乏基础防护,这些高级机制将毫无价值。