Securely and Seamlessly Deploy MySQL with Your Application

MySQL security best practices often assume restricted access to the physical server and restrictive file system privileges. However, OEM’s and ISV’s who bundle and distribute their application with MySQL have no control over where the application is installed. In fact, the application is often deployed on workstations with unrestricted access to the underlying data files.

Common security vulnerabilities: This session will address two common security vulnerabilities that assume unrestricted access to the underlying MySQL grant and data files.

1. I’ll identify three common strategies to prevent data file tampering:
   1. Checksum
   2. Random User Name
   3. Third-party file encryption

Deployment options: I’ll address silent install options using the Windows Installer and the MySQL Instance Configuration utility. Launching the MySQL executable from a command-line and common methods of initializing an empty database will be discussed. I’ll talk about when it’s appropriate to use MySQL’s deeply embedded library (libmysqld) and when to use the Connector/MXJ Java utility package.

Attendees will use sample command-line parameters and silent install instructions to speed up their development and deployment with MySQL