<div id="docs-body">
 <div class="section">
  <div class="titlepage">
   <div>
    <div>
     <h2 class="title">
      <a name="security-plugins">
      </a>
      8.4 Security Components and Plugins
     </h2>
    </div>
   </div>
  </div>
  <div class="toc">
   <dl class="toc">
    <dt>
     <span class="section">
      <a href="authentication-plugins.html">
       8.4.1 Authentication Plugins
      </a>
     </span>
    </dt>
    <dt>
     <span class="section">
      <a href="connection-control.html">
       8.4.2 The Connection-Control Plugins
      </a>
     </span>
    </dt>
    <dt>
     <span class="section">
      <a href="validate-password.html">
       8.4.3 The Password Validation Component
      </a>
     </span>
    </dt>
    <dt>
     <span class="section">
      <a href="keyring.html">
       8.4.4 The MySQL Keyring
      </a>
     </span>
    </dt>
    <dt>
     <span class="section">
      <a href="audit-log.html">
       8.4.5 MySQL Enterprise Audit
      </a>
     </span>
    </dt>
    <dt>
     <span class="section">
      <a href="audit-api-message-emit.html">
       8.4.6 The Audit Message Component
      </a>
     </span>
    </dt>
    <dt>
     <span class="section">
      <a href="firewall.html">
       8.4.7 MySQL Enterprise Firewall
      </a>
     </span>
    </dt>
   </dl>
  </div>
  <a class="indexterm" name="idm46045246380208">
  </a>
  <a class="indexterm" name="idm46045246378752">
  </a>
  <a class="indexterm" name="idm46045246377264">
  </a>
  <a class="indexterm" name="idm46045246375776">
  </a>
  <p>
   MySQL includes several components and plugins that implement
    security features:
  </p>
  <div class="itemizedlist">
   <ul class="itemizedlist" style="list-style-type: disc; ">
    <li class="listitem">
     <p>
      Plugins for authenticating attempts by clients to connect to
        MySQL Server. Plugins are available for several authentication
        protocols. For general discussion of the authentication process,
        see
      <a class="xref" href="pluggable-authentication.html" title="8.2.17 Pluggable Authentication">
       Section 8.2.17, “Pluggable Authentication”
      </a>
      . For
        characteristics of specific authentication plugins, see
      <a class="xref" href="authentication-plugins.html" title="8.4.1 Authentication Plugins">
       Section 8.4.1, “Authentication Plugins”
      </a>
      .
     </p>
    </li>
    <li class="listitem">
     <p>
      A password-validation component for implementing password
        strength policies and assessing the strength of potential
        passwords. See
      <a class="xref" href="validate-password.html" title="8.4.3 The Password Validation Component">
       Section 8.4.3, “The Password Validation Component”
      </a>
      .
     </p>
    </li>
    <li class="listitem">
     <p>
      Keyring plugins that provide secure storage for sensitive
        information. See
      <a class="xref" href="keyring.html" title="8.4.4 The MySQL Keyring">
       Section 8.4.4, “The MySQL Keyring”
      </a>
      .
     </p>
    </li>
    <li class="listitem">
     <p>
      (MySQL Enterprise Edition only) MySQL Enterprise Audit, implemented using a server plugin, uses
        the open MySQL Audit API to enable standard, policy-based
        monitoring and logging of connection and query activity executed
        on specific MySQL servers. Designed to meet the Oracle audit
        specification, MySQL Enterprise Audit provides an out of box, easy to use
        auditing and compliance solution for applications that are
        governed by both internal and external regulatory guidelines.
        See
      <a class="xref" href="audit-log.html" title="8.4.5 MySQL Enterprise Audit">
       Section 8.4.5, “MySQL Enterprise Audit”
      </a>
      .
     </p>
    </li>
    <li class="listitem">
     <p>
      A function enables applications to add their own message events
        to the audit log. See
      <a class="xref" href="audit-api-message-emit.html" title="8.4.6 The Audit Message Component">
       Section 8.4.6, “The Audit Message Component”
      </a>
      .
     </p>
    </li>
    <li class="listitem">
     <p>
      (MySQL Enterprise Edition only) MySQL Enterprise Firewall, an application-level firewall that enables
        database administrators to permit or deny SQL statement
        execution based on matching against lists of accepted statement
        patterns. This helps harden MySQL Server against attacks such as
        SQL injection or attempts to exploit applications by using them
        outside of their legitimate query workload characteristics. See
      <a class="xref" href="firewall.html" title="8.4.7 MySQL Enterprise Firewall">
       Section 8.4.7, “MySQL Enterprise Firewall”
      </a>
      .
     </p>
    </li>
    <li class="listitem">
     <p>
      (MySQL Enterprise Edition only) MySQL Enterprise Data Masking and De-Identification, implemented as a plugin library
        containing a plugin and a set of functions. Data masking hides
        sensitive information by replacing real values with substitutes.
        MySQL Enterprise Data Masking and De-Identification functions enable masking existing data using several
        methods such as obfuscation (removing identifying
        characteristics), generation of formatted random data, and data
        replacement or substitution. See
      <a class="xref" href="data-masking.html" title="8.5 MySQL Enterprise Data Masking and De-Identification">
       Section 8.5, “MySQL Enterprise Data Masking and De-Identification”
      </a>
      .
     </p>
    </li>
   </ul>
  </div>
 </div>
 <br/>
</div>
