Schedule - PGConf.EU 2017
Protecting Your Customers With PostgreSQL
Date: 2017-10-27
Time: 11:50–12:40
Room: Baltic II+III
Level: Intermediate
This talk is a practical look at how PostgreSQL can help protect your customer's data. Based on my experience of working on a large energy insights database. Starting with why we should care about security and walking through various features that PostgreSQL provides to secure your data. We will take a look at:
- Roles, table and column grants, row level security
- Functional interfaces, security definer and PL/Proxy
- Anonymization with views and logical replication
- Auditing using pgAudit and logging
- Developer two factor authentication with Yubikeys
- Disk encryption and performance implications
- Securing client access with TLS
Slides
The following slides have been made available for this session:
- https://files.intrbiz.com/talks/PGConfEU2017_Protecting_Your_Customers_With_PostgreSQL.pdf
- https://github.com/intrbiz/pg_decoy
