MySQL includes several components and plugins that implement security features:MySQL包括几个实现安全功能的组件和插件:
Plugins for authenticating attempts by clients to connect to MySQL Server. 用于验证客户端连接到MySQL服务器的尝试的插件。Plugins are available for several authentication protocols. 插件可用于多种身份验证协议。For general discussion of the authentication process, see Section 6.2.17, “Pluggable Authentication”. 有关身份验证过程的一般讨论,请参阅第6.2.17节,“可插拔身份验证”。For characteristics of specific authentication plugins, see Section 6.4.1, “Authentication Plugins”.有关特定身份验证插件的特性,请参阅第6.4.1节,“身份验证插件”。
A password-validation component for implementing password strength policies and assessing the strength of potential passwords. 用于实施密码强度策略和评估潜在密码强度的密码验证组件。See Section 6.4.3, “The Password Validation Component”.请参阅第6.4.3节,“密码验证组件”。
Keyring plugins that provide secure storage for sensitive information. See Section 6.4.4, “The MySQL Keyring”.为敏感信息提供安全存储的密钥环插件。请参阅第6.4.4节,“MySQL密钥环”。
(MySQL Enterprise Edition only) MySQL Enterprise Audit, implemented using a server plugin, uses the open MySQL Audit API to enable standard, policy-based monitoring and logging of connection and query activity executed on specific MySQL servers. (仅限MySQL Enterprise Edition)MySQL Enterprise Audit使用服务器插件实现,使用开放式MySQL Audit API对特定MySQL服务器上执行的连接和查询活动进行标准、基于策略的监控和日志记录。Designed to meet the Oracle audit specification, MySQL Enterprise Audit provides an out of box, easy to use auditing and compliance solution for applications that are governed by both internal and external regulatory guidelines. See Section 6.4.5, “MySQL Enterprise Audit”.MySQL Enterprise audit旨在满足Oracle审计规范,为受内部和外部监管准则约束的应用程序提供了一种开箱即用、易于使用的审计和合规解决方案。请参阅第6.4.5节,“MySQL企业审计”。
A function enables applications to add their own message events to the audit log. See Section 6.4.6, “The Audit Message Component”.一个函数使应用程序能够将自己的消息事件添加到审核日志中。请参阅第6.4.6节,“审计消息组件”。
(MySQL Enterprise Edition only) MySQL Enterprise Firewall, an application-level firewall that enables database administrators to permit or deny SQL statement execution based on matching against lists of accepted statement patterns. (仅限MySQL企业版)MySQL企业防火墙,一种应用程序级防火墙,使数据库管理员能够根据与接受的语句模式列表的匹配来允许或拒绝SQL语句执行。This helps harden MySQL Server against attacks such as SQL injection or attempts to exploit applications by using them outside of their legitimate query workload characteristics. See Section 6.4.7, “MySQL Enterprise Firewall”.这有助于增强MySQL Server的防御能力,使其能够抵御SQL注入等攻击,或者通过在合法查询工作负载特征之外使用应用程序来攻击应用程序。请参阅第6.4.7节,“MySQL企业防火墙”。
(MySQL Enterprise Edition only) MySQL Enterprise Data Masking and De-Identification, implemented as a plugin library containing a plugin and a set of functions. Data masking hides sensitive information by replacing real values with substitutes. (仅限MySQL企业版)MySQL企业数据屏蔽和去标识,作为包含插件和一组函数的插件库实现。数据屏蔽通过用替代值替换真实值来隐藏敏感信息。MySQL Enterprise Data Masking and De-Identification functions enable masking existing data using several methods such as obfuscation (removing identifying characteristics), generation of formatted random data, and data replacement or substitution. MySQL企业数据屏蔽和去标识功能允许使用多种方法屏蔽现有数据,如混淆(删除标识特征)、生成格式化随机数据以及数据替换或替换。See Section 6.5, “MySQL Enterprise Data Masking and De-Identification”.请参阅第6.5节,“MySQL企业数据屏蔽和去标识”。