EDB Postgres Advanced Server Security Features Guide

This guide describes features that provide added security to EDB Postgres Advanced Server installations. It is not a comprehensive guide to the security functionality provided by PostgreSQL that is built into Advanced Server.

• [SQL/Protect](02_protecting_against_sql_injection_attacks/#protecting_against_sql_injection_attacks) provides protection from SQL injection attacks.
  

• [Virtual Private Database](03_virtual_private_database/#virtual_private_database) provides fine-grained access control for sensitive data.
  

• [sslutils](04_sslutils/#sslutils) is a Postgres extension that allows you to generate SSL certificates.
  

• [Data redaction](05_data_redaction/#data_redaction) functionality allows you to dynamically mask portions of data.
  

For information about Postgres authentication and security features, consult the PostgreSQL core documentation, available at:

https://www.postgresql.org/docs/

• Protecting Against SQL Injection Attacks
  • SQL/Protect Overview
    • Types of SQL Injection Attacks
    • Monitoring SQL Injection Attacks
  • Configuring SQL/Protect
    • Selecting Roles to Protect
    • Monitoring Protected Roles
  • Common Maintenance Operations
    • Adding a Role to the Protected Roles List
    • Removing a Role From the Protected Roles List
    • Setting the Types of Protection for a Role
    • Removing a Relation From the Protected Relations List
    • Deleting Statistics
    • Deleting Offending Queries
    • Disabling and Enabling Monitoring
  • Backing Up and Restoring a SQL/Protect Database
    • Object Identification Numbers in SQL/Protect Tables
    • Backing Up the Database
    • Restoring From the Backup Files
• Virtual Private Database
• sslutils
  • openssl_rsa_generate_key
  • openssl_rsa_key_to_csr
  • openssl_csr_to_crt
  • openssl_rsa_generate_crl
• Data Redaction
  • CREATE REDACTION POLICY
  • ALTER REDACTION POLICY
  • DROP REDACTION POLICY
  • System Catalogs
    • edb_redaction_column
    • edb_redaction_policy