changes, never mutate existing ii. Remove application assumptions about DB version iii. The Canary & Cluster Immune System Release Patterns 1. Canary Strategy a. Automates the release process of promoting environments b. Successful application behavior moves to the next group; failure stops or rolls back 2. Cluster Immune Strategy a. Expands upon Canary. Links production monitoring with release process to automatically

[ 默认⼯作在tcp 22端⼝, 弱⼝令, 远程执⾏, 后⻔植⼊ ] ORACLE [ 默认⼯作在tcp 1521端⼝, 弱⼝令, 敏感账号密码泄露, 提权, 远程执⾏, 后⻔植⼊ ] Mysql [ 默认⼯作在tcp 3306端⼝, 弱⼝令, 敏感账号密码泄露, 提权(只适⽤于部分⽼系统) ] REDIS [ 默认⼯作在tcp 6379端⼝, 弱⼝令, 未授权访问, 写⽂件(webshell CVE-2019-13272 利⽤各类第三⽅服务 / 软件⼯具提权 Mssql [重点] Oracle [重点] Mysql 各类第三⽅软件dll劫持 [重点] suid权限 计划任务 各种错误服务配置利⽤ 0x06 内⽹安全 [