Posts about Security
Crunchy Data PostgreSQL 16 Security Technical Implementation Guide Released by DISA
Crunchy Data, together with the United States Defense Information Systems Agency (DISA), is pleased to release the newest STIG for Postgres including versions 13 through 16.
3 min readThe Vectors of Database Encryption
Keith offers a high level review of the vectors of attack on databases and database encryption types including Data-At-Rest, Data-In-Transit, and Data-In-Use.
7 min readSafer Application Users in Postgres
Risk management for Postgres. A guide to changing application user permissions so they can't delete your production database.
8 min readSecure Permissions for pgBackRest
A guide on securing the pgBackRest user for high-security Postgres environments.
14 min read
Secure PostgreSQL 14 with CIS Benchmark
Committed to securing Postgres deployments, Crunchy Data is proud to announce this newly published CIS PostgreSQL 14 Benchmark.
4 min readDatabase Security Best Practices on Kubernetes
Review some important security topics for databases on Kubernetes like running as an unprivileged user, data encryption, and regular software updates.
7 min read
Is Postgres Secure?
This post provides a framework for thinking through how you can confront "security questions" as you embark on your Postgres journey.
6 min read
Enhancing PostgreSQL 13 Security with the CIS Benchmark
Crunchy Data has recently announced an update to the CIS PostgreSQL Benchmark by the Center for Internet Security, a nonprofit organization that provides publications around standards and best practices for securing technologies systems.
4 min read
Postgres and Crypto Supply Chain of Integrity
How can you get PostgreSQL to use FIPS 140-2 crypto? The answer, to some extent, depends on how rigorously you need to be able to prove your answer. If the proof required is more than a casual check, the process is not well documented as far as I can tell. Therefore I will attempt to address that deficiency here.
9 min read
Deploy PostgreSQL With TLS in Kubernetes
Secure communication for your Postgres clusters in Kubernetes by deploying them with TLS. Learn about the different TLS modes that PostgreSQL offers!
7 min read
Announcing the Crunchy Data PostgreSQL Security Technical Implementation Guide
Crunchy Data is pleased to announce the publication of the Crunchy Data PostgreSQL Security Technical Implementation Guide (STIG) by the United States Defense Information Systems Agency (DISA). PostgreSQL was the first open source database to provide a published STIG, and Crunchy Data is proud to update and improve the STIG as PostgreSQL continues to advance and evolve.
3 min read
How to SCRAM in Postgres with pgBouncer
Learn how pgBouncer uses SCRAM authentication for PostgreSQL!
6 min read
How To Improve PgBouncer Security with TLS/SSL
PgBouncer is a commonly deployed and recommended connection pooler for PostgreSQL and supports a number of authentication methods including TLS/SSL client certificate authentication.
10 min read
Enhancing PostgreSQL 12 Security with the CIS Benchmark
The CIS PostgreSQL 12 Benchmark continues to build upon previous versions and Crunchy Data’s efforts with the PostgreSQL Security Technical Implementation Guide.
4 min read
Certificate Authentication Recipe for PostgreSQL Docker Containers
Learn how to set up PostgreSQL certificate-based authentication with a simple Docker container recipe.
11 min read
How to Upgrade Your PostgreSQL Passwords to SCRAM
A how to guide for upgrading your PostgreSQL passwords to use SCRAM (SCRAM-SHA-256) for authentication instead of MD5.
7 min read
How the CIS Benchmark for PostgreSQL 11 Works
Learn how to use the CIS Benchmark for PostgreSQL 11 to secure your PostgreSQL and automate the security verification process.
3 min read
PostgreSQL Deep Dive: PostgreSQL Defaults and Impact on Security - Part 2
CVE-2018-1058 discusses how a PostgreSQL user can create trojans with unexpected results. Learn how to prevent this along with other security concepts.
10 min read
PostgreSQL Deep Dive: PostgreSQL Defaults and Impact on Security - Part 1
Explore how the PostgreSQL extension crunchy_check_access helps you to understand default PostgreSQL security settings and how it impacts your users.
25 min read
Explaining CVE-2019-10164 + PostgreSQL Security Best Practices
The PostgreSQL Global Development Group provided an out-of-cycle update release for all supported to provide a fix for the CVE-2019-10164 vulnerability. This vulnerability only affects people running PostgreSQL 10, 11 or the 12 beta, and it is effectively remediated by simply upgrading all of your PostgreSQL installations to the latest versions.
5 min read
