8.4 中文镜像

MySQL 8.4 参考手册 · 中文镜像

正文为中文,英文原文默认隐藏。点击任意中文段落即可展开 / 收起对应英文原文。

打开官方英文原文 ↗

译文由机器翻译生成,仅供理解参考;有疑问请以官方英文原文为准。

MySQL 8.4 参考手册 / 8 安全 / 8.4 安全组件和插件
中文点击中文段落可显示 / 隐藏英文原文本页译文覆盖 100%

8.4 安全组件和插件8.4 Security Components and Plugins

MySQL 包含多个实现安全功能的组件和插件:MySQL includes several components and plugins that implement security features:

  • 用于验证客户端尝试连接 MySQL 服务器的插件。可针对多种身份验证协议提供插件。有关身份验证过程的一般讨论,请参阅第 8.2.17 节,“可插入身份验证”。有关特定身份验证插件的特性,请参阅第 8.4.1 节,“身份验证插件”。Plugins for authenticating attempts by clients to connect to MySQL Server. Plugins are available for several authentication protocols. For general discussion of the authentication process, see Section 8.2.17, “Pluggable Authentication”. For characteristics of specific authentication plugins, see Section 8.4.1, “Authentication Plugins”.

  • 用于实现密码强度策略并评估潜在密码强度的密码验证组件。请参阅第 8.4.3 节,“密码验证组件”。A password-validation component for implementing password strength policies and assessing the strength of potential passwords. See Section 8.4.3, “The Password Validation Component”.

  • 用于安全存储敏感信息的钥匙串插件。请参见第 8.4.4 节,“MySQL 钥匙串”。Keyring plugins that provide secure storage for sensitive information. See Section 8.4.4, “The MySQL Keyring”.

  • (仅限 MySQL 企业版)MySQL Enterprise Audit 使用服务器插件实现,通过开放的 MySQL Audit API 启用对特定 MySQL 服务器上执行的连接和查询活动的标准、基于策略的监控和日志记录。MySQL Enterprise Audit 旨在满足 Oracle 审计规范,为受内部和外部监管指南管理的应用程序提供开箱即用、易于使用的审计和合规解决方案。请参见第 8.4.5 节,“MySQL Enterprise Audit”。(MySQL Enterprise Edition only) MySQL Enterprise Audit, implemented using a server plugin, uses the open MySQL Audit API to enable standard, policy-based monitoring and logging of connection and query activity executed on specific MySQL servers. Designed to meet the Oracle audit specification, MySQL Enterprise Audit provides an out of box, easy to use auditing and compliance solution for applications that are governed by both internal and external regulatory guidelines. See Section 8.4.5, “MySQL Enterprise Audit”.

  • 此功能使应用程序能够将自己的消息事件添加到审计日志中。请参见 第 8.4.6 节,“审计消息组件”。A function enables applications to add their own message events to the audit log. See Section 8.4.6, “The Audit Message Component”.

  • (仅适用于 MySQL 企业版)MySQL 企业防火墙是一种应用级防火墙,使数据库管理员能够根据与接受的语句模式列表的匹配情况允许或拒绝 SQL 语句的执行。这有助于增强 MySQL Server 对攻击的防御,如 SQL 注入或者试图通过非正常查询工作负载特征利用应用程序的行为。请参见 第 8.4.7 节,“MySQL 企业防火墙”。(MySQL Enterprise Edition only) MySQL Enterprise Firewall, an application-level firewall that enables database administrators to permit or deny SQL statement execution based on matching against lists of accepted statement patterns. This helps harden MySQL Server against attacks such as SQL injection or attempts to exploit applications by using them outside of their legitimate query workload characteristics. See Section 8.4.7, “MySQL Enterprise Firewall”.

  • (仅限 MySQL 企业版)MySQL 企业版数据屏蔽与去标识化,作为包含插件和一组函数的插件库实现。数据屏蔽通过用替代值替换真实值来隐藏敏感信息。MySQL 企业版数据屏蔽与去标识化函数能够使用多种方法对现有数据进行屏蔽,例如模糊处理(去除可识别特征)、生成格式化随机数据以及数据替换或替代。参见 第 8.5 节,“MySQL 企业版数据屏蔽与去标识化”。(MySQL Enterprise Edition only) MySQL Enterprise Data Masking and De-Identification, implemented as a plugin library containing a plugin and a set of functions. Data masking hides sensitive information by replacing real values with substitutes. MySQL Enterprise Data Masking and De-Identification functions enable masking existing data using several methods such as obfuscation (removing identifying characteristics), generation of formatted random data, and data replacement or substitution. See Section 8.5, “MySQL Enterprise Data Masking and De-Identification”.