MySQL Enterprise Security Overview “grows up”  -- when the data is large enough that the backup takes significant time, and when your data is important enough to your business that you must capture every last change, without taking your application, website, or web service offline. MySQL Enterprise Backup does a hot backup of all tables that use the InnoDB storage engine. For tables using MyISAM or other non-InnoDB storage engines, it does a “warm”  backup, where the database continues to run, but those tables cannot be modified while being backed up. For efficient backup operations, you can designate InnoDB as the default storage engine for new tables, or convert existing tables to use the InnoDB storage engine. MySQL Enterprise Edition provides plugins that implement security features using external services: For other related Enterprise security features, see Section 30.4, “MySQL Enterprise Encryption Overview” . MySQL Enterprise Edition includes a set of encryption functions based on the OpenSSL library that expose OpenSSL capabilities at the SQL level. These functions enable Enterprise applications to perform the following operations: For more information, see Section 6.6, “MySQL Enterprise Encryption” . For other related Enterprise security features, see Section 30.3, “MySQL Enterprise Security Overview” . 30.4 MySQL Enterprise Encryption Overview 30.5 MySQL Enterprise Audit Overview 30.3 MySQL Enterprise Security Overview •MySQL Enterprise Edition includes an authentication plugin that enables MySQL Server to use PAM (Pluggable Authentication Modules) to authenticate MySQL users. PAM enables a system to use a standard interface to access various kinds of authentication methods, such as Unix passwords or an LDAP directory. For more information, see Section 6.4.1.5, “PAM Pluggable Authentication” . •MySQL Enterprise Edition includes an authentication plugin that performs external authentication on Windows, enabling MySQL Server to use native Windows services to authenticate client connections. Users who have logged in to Windows can connect from MySQL client programs to the server based on the information in their environment without specifying an additional password. For more information, see Section 6.4.1.6, “Windows Pluggable Authentication” . •MySQL Enterprise Edition includes a set of encryption functions based on the OpenSSL library that expose OpenSSL capabilities at the SQL level. These functions enable masking existing data using several methods such as obfuscation (removing identifying characteristics), generation of formatted random data, and data replacement or substitution. For more information, see Section 30.4, “MySQL Enterprise Encryption Overview” . •MySQL Enterprise Edition 5.7 and higher includes a keyring plugin that uses Oracle Key Vault as a back end for keyring storage. For more information, see Section 6.4.4, “The MySQL Keyring” . •Implement added data protection using public-key asymmetric cryptography •Create public and private keys and digital signatures •Perform asymmetric encryption and decryption •Use cryptographic hashing for digital signing and data verification and validation 5223