Oracle
A new report ranks Microsoft SQL Server 2000 service pack 4 as the most secure database in the market

Microsoft beats Oracle in security showdown

The internet age outpaces database vendor's security practices

Tom Sanders in California

Microsoft is beating Oracle hands down with the security of its database, according to a new report. 

David Litchfield, a security researcher with NGS Software, published a whitepaper entitled Which database is more secure? Oracle vs. Microsoft (PDF download) on 21 November comparing the number of software vulnerabilities patched by both vendors in their respective products in the past six years. 

Advertisement

Microsoft patched 59 vulnerabilities in its SQL Server 7, 2000 and 2005 databases during the period, while Oracle issued 233 patches for software flaws in its Oracle 8, 9 and 10g databases.

The research also pointed out that Microsoft has not issued a single security bulletin for its databases since mid-2003, whereas Oracle has seen a spike in patches in recent years.

Litchfield ranked Microsoft SQL Server 2000 service pack 4 as the most secure database in the market, together with the PostgreSQL open source project. He ranked Oracle's 10g database at the bottom. 

"It will take me five minutes to find a new bug in the Oracle 10g database, but I cannot do that with SQL Server 2005," Litchfield told vnunet.com in an interview. 

Litchfield claims to have reported 49 vulnerabilities to Oracle that the company has yet to patch.

Other researchers are sitting on dozens of so-called zero-day vulnerabilities, including security firm Argeniss which plans to have a Week of Oracle Database Bugs in December to demonstrate the vendor's poor security record. 

Litchfield's report deals another blow to Oracle. Analyst firm Enterprise Strategy Group (ESG) published a research note earlier this month blasting Oracle's security record, drawing largely the same conclusions.

The ESG report, Microsoft SQL Server Runs the Security Table, (PDF download) attracted criticism, however, prompting Litchfield to publish his whitepaper.

  • Have your say
  • Send to a friend
  • Print
  • Digg
  • Reddit
  • Share

Tags:

Do you agree?

Further reading

Related whitepapers

Related jobs

Most watched

Motorola logo

Motorola demos femtocell hardware

Device combines femtocell, SIP softphone and digital photoframe

HTC Hero

Video: HTC Hero launch

Handset maker unveils its latest Android-based smartphone

IT white papers

Search white papers

Top categories

Poll

Poll: Summer smartphones

Poll: Summer smartphones

Which smartphone will you be taking to the beach this summer?

View poll results

Advertisement

Advertisement

Newsletter signup

Sign up for our range of FREE newsletters:

Existing User

Newsletter user login:

Enter email address to edit your newsletter preferences

Job of the week

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Hiring now on ComputingCareers:

Related IT jobs

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Spotlight

great wall of china

Podcast Special: Views from the Valley

The hottest stories from the US, including news of China's...

Red Hat

Red Hat beta builds on virtualisation plans

Kernel-based Virtual Machine virtualisation added to latest Enterprise Linux beta

Mobile phone charger

Top 10 articles, 3 July 09

Free upgrades for Windows 7, and standard mobile phone chargers...

Overheating iPhones: Sorry I'll have to call you back, I'm in a heat wave

The heat wave may have broken in the UK, but...

Primary Navigation