> For the complete documentation index, see [llms.txt](https://ssv.skill.or.kr/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://ssv.skill.or.kr/cloud-security/db-mssql-security-vulnerability.md). # \[DB] MS-SQL 시스템 취약점 점검 가이드 출처 : \[2020.12] 한국인터넷진흥원 발간 내용 "클라우드 취약점 점검 가이드" {% embed url="" %} donation {% endembed %} ## \[DB] MS-SQL 시스템 취약점 점검 가이드 ![그림. DB mssql 취약점 진단 리스트 ](https://1567468684-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fs0j0HSGvadiD7HlWa44X%2Fuploads%2FW2s0uHQEL9WrgNVoe6sq%2Fimage.png?alt=media\&token=6ff7ec1a-8c73-4bc5-a699-398f9439e1d3) ## 가. 계정 관리 ### DS-01. 불필요한 계정 제거 ![그림. DS-01. 불필요한 계정 제거 ](https://1567468684-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fs0j0HSGvadiD7HlWa44X%2Fuploads%2FK7jR4wfQbyfDpgCrRHZd%2Fimage.png?alt=media\&token=703124f7-c6b3-4bb3-97a1-90038a4df76f) ### DS-02. SYSADMIN 권한 제한 ![그림. DS-02. SYSADMIN 권한 제한 ](https://1567468684-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fs0j0HSGvadiD7HlWa44X%2Fuploads%2F8GZSL06jfjr6zcU4F1ES%2Fimage.png?alt=media\&token=5ef691c7-8ad0-40b6-9315-f06d9ba3e8b0) ![그림. DS-02. SYSADMIN 권한 제한 ](https://1567468684-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fs0j0HSGvadiD7HlWa44X%2Fuploads%2FO48FRrZDDk9jwk0487db%2Fimage.png?alt=media\&token=c82f4ebe-03a8-4564-bfe4-41777e9a0af9) ### DS-03. SA 계정 패스워드 관리 ![그림. DS-03. SA 계정 패스워드 관리 ](https://1567468684-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fs0j0HSGvadiD7HlWa44X%2Fuploads%2FEAXZvRaI9B9LtvpOTa9r%2Fimage.png?alt=media\&token=bc66283a-4a1b-47fd-ad09-121dd7906f74) ### DS-04. guest 계정 사용 제한 ![그림. DS-04. guest 계정 사용 제한 ](https://1567468684-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fs0j0HSGvadiD7HlWa44X%2Fuploads%2Ft0wcE3Xhhk5U5v9XKBpz%2Fimage.png?alt=media\&token=3efe8b50-be09-48bd-9465-6b82eba24b74) ![그림. DS-04. guest 계정 사용 제한 ](https://1567468684-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fs0j0HSGvadiD7HlWa44X%2Fuploads%2FbyHwtKvlIUYmQHo9pvpW%2Fimage.png?alt=media\&token=7f77cbfc-09f3-494e-b725-2b26f112905b) ## 나. 보안 설정 ### DS-05. Registry Procedure Permission 제한 ![그림. DS-05. Registry Procedure Permission 제한 ](https://1567468684-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fs0j0HSGvadiD7HlWa44X%2Fuploads%2Fryg2Jjy2U5OMczCHe1by%2Fimage.png?alt=media\&token=68f30bd3-5f54-44a0-9eff-cdfad1c2ee6f) ![그림. DS-05. Registry Procedure Permission 제한 ](https://1567468684-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fs0j0HSGvadiD7HlWa44X%2Fuploads%2FZdbO1CcBuxMuoQmAHUYB%2Fimage.png?alt=media\&token=f7896295-6bdb-466f-9598-232474c55c10) ### DS-06. xp\_cmdshell 사용 제한 ![그림. DS-06. xp\_cmdshell 사용 제한 ](https://1567468684-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fs0j0HSGvadiD7HlWa44X%2Fuploads%2FPsMHVgb3TXlpRRUJdQjl%2Fimage.png?alt=media\&token=81b0d6fe-4ebb-48d6-9b2d-7849b220374a) ![그림. DS-06. xp\_cmdshell 사용 제한 ](https://1567468684-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fs0j0HSGvadiD7HlWa44X%2Fuploads%2FUwdv0AHwlPno8gKIrMvK%2Fimage.png?alt=media\&token=22ec4b7a-a6b2-4e32-ba24-f4d36b21f325) ## 다. 패치 및 로그 관리 ### DS-07. 로그 활성화 ![그림. DS-07. 로그 활성화 ](https://1567468684-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fs0j0HSGvadiD7HlWa44X%2Fuploads%2FnkjH3oYvwPPFrMcCKZyK%2Fimage.png?alt=media\&token=750d8bad-cbba-4cd6-8c70-5897748a76cd) ### DS-08. 패치 및 로그 관리 ![그림. DS-08. 패치 및 로그 관리 ](https://1567468684-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fs0j0HSGvadiD7HlWa44X%2Fuploads%2FYVjUQ2ZDxi3NywrBqtVx%2Fimage.png?alt=media\&token=72220ca3-c585-4bce-9987-7f1a3eefe736) {% embed url="" %} donation {% endembed %}