Database Systems and Security

Backup and Recovery

Evrad KAMTCHOUM

CENTER FOR CYBERSECURITY AND MATHEMATICAL CRYPTOLOGY

THE UNIVERSITY OF BAMENDA

January 16, 2025

Evrad KAMTCHOUM (CCMC (UBa)) Database Systems January 16, 2025 1 / 51

Contents

1 Introduction

2 Database Backup Strategies and Methodologies

3 Recovery Options and Disaster Recovery Planning

4 Testing and Validating Backup and Recovery Procedures

5 Automated Backup and Recovery Tools and Processes

6 Conclusion

Evrad KAMTCHOUM (CCMC (UBa)) Database Systems January 16, 2025 2 / 51

 Introduction

Evrad KAMTCHOUM (CCMC (UBa)) Database Systems January 16, 2025 3 / 51

Backup and Recovery: Definition

What is Backup?
A backup is a copy of data from a database that is taken to ensure
that the data can be restored in case of data loss or corruption.
Types of backups include full, incremental, and differential backups.

What is Recovery?
Recovery is the process of restoring the data from a backup to its
original or a previous state after data loss, corruption, or failure.
Recovery strategies include point-in-time recovery, complete recovery,
and incomplete recovery.

Evrad KAMTCHOUM (CCMC (UBa)) Database Systems January 16, 2025 4 / 51

Backup and Recovery: Importance

Importance of Backup and Recovery

Data Protection: Ensures that data can be restored after accidental
deletion, corruption, or hardware failures.
Business Continuity: Minimizes downtime and ensures that business
operations can continue without significant interruption.
Compliance: Helps meet regulatory requirements for data retention
and protection.
Disaster Recovery: Provides a safety net in the event of
catastrophic events such as natural disasters or cyberattacks.
Peace of Mind: Offers assurance that data integrity and availability
are maintained.

Evrad KAMTCHOUM (CCMC (UBa)) Database Systems January 16, 2025 5 / 51

Risks of Data Loss

Human Error
Accidental Deletion: Mistakenly deleting important files or records.
Incorrect Data Entry: Entering wrong data that leads to loss or corruption.

Hardware Failures
Disk Crashes: Hard drives can fail, leading to data inaccessibility.
Power Outages: Sudden loss of power can corrupt data or cause hardware
damage.

Software Issues
Bugs and Glitches: Software bugs can corrupt data or cause unexpected
losses.
Compatibility Issues: Conflicts between software versions can result in data
loss.
Evrad KAMTCHOUM (CCMC (UBa)) Database Systems January 16, 2025 6 / 51
Risks of Data Loss (2)

Cyber Threats
Malware and Viruses: Can destroy, corrupt, or steal data.
Ransomware: Locks access to data until a ransom is paid, with no guarantee of data
return.

Natural Disasters
Floods, Earthquakes, Fires: Physical destruction of data storage systems.
Other Catastrophes: Events like hurricanes or tornadoes can damage infrastructure.

Theft and Unauthorized Access

Physical Theft: Stealing of hardware containing sensitive data.
Data Breaches: Unauthorized access and theft of data by hackers.

Lack of Proper Backup

Infrequent Backups: Not backing up data regularly increases risk.
Incomplete Backups: Missing critical files or components in backups.

Evrad KAMTCHOUM (CCMC (UBa)) Database Systems January 16, 2025 7 / 51

Backup Tools and Utilities

Native Database Tools

Oracle RMAN
MySQL mysqldump
PostgreSQL pg dump

Third-Party Tools
Veritas NetBackup
IBM Tivoli Storage Manager

Evrad KAMTCHOUM (CCMC (UBa)) Database Systems January 16, 2025 8 / 51

Best Practices for Backup and Recovery

Regularly Test Backups

Automate Backup Processes

Store Backups Offsite

Maintain Backup Integrity

Document Backup and Recovery Procedures

Evrad KAMTCHOUM (CCMC (UBa)) Database Systems January 16, 2025 9 / 51

 Practical Example: MySQL Backup and Recovery

Backup
1 # F u l l Backup
2 mysqldump −u r o o t −p − a l l −d a t a b a s e s > f u l l b a c k u p . s q l
3
4 # I n c r e m e n t a l Backup u s i n g B i n a r y L o g s
5 m y s q l a d m i n f l u s h −l o g s
6 cp / v a r / l o g / m y s q l / mysql−b i n . 0 0 0 0 0 1 / backup /
7

Recovery
1 # R e s t o r e F u l l Backup
2 m y s q l −u r o o t −p < f u l l b a c k u p . s q l
3
4 # A p p l y I n c r e m e n t a l Backup
5 m y s q l b i n l o g / backup / mysql−b i n . 0 0 0 0 0 1 | m y s q l −u r o o t −p
6

Evrad KAMTCHOUM (CCMC (UBa)) Database Systems January 16, 2025 10 / 51

 Database Backup Strategies and Methodologies

Evrad KAMTCHOUM (CCMC (UBa)) Database Systems January 16, 2025 11 / 51

Objectives of Backup and Recovery Strategies

Data Protection
Ensure that data is safeguarded against loss, corruption, and unauthorized access.
Provide mechanisms to restore data to its original state in case of any incidents.

Business Continuity
Minimize downtime and maintain continuous business operations.
Quickly restore critical systems and applications to operational status.

Disaster Recovery
Develop a plan to recover from major incidents such as natural disasters or cyber-attacks.
Ensure that data can be restored to a secondary location if the primary site is
compromised.

Compliance and Legal Requirements

Adhere to industry regulations and standards regarding data retention and protection.
Provide auditable evidence of data backup and recovery practices.

Evrad KAMTCHOUM (CCMC (UBa)) Database Systems January 16, 2025 12 / 51

Objectives of Backup and Recovery Strategies (2)

Data Integrity and Consistency

Ensure that backups are consistent and can be used to restore data accurately.
Verify the integrity of backup files to prevent data corruption.

Scalability and Flexibility

Implement scalable backup solutions to handle growing amounts of data.
Provide flexible recovery options to address different types of data loss scenarios.

Cost Efficiency
Optimize the cost of backup storage and recovery processes.
Balance the cost of backup solutions with the criticality of the data being protected.

Evrad KAMTCHOUM (CCMC (UBa)) Database Systems January 16, 2025 13 / 51

Backup Strategies

Regular Backup Schedule

Daily, weekly, and monthly backups
Ensures data is consistently protected
Grandfather-Father-Son (GFS)
Rotational scheme using daily, weekly, and monthly backups
Reduces the risk of data loss over time
3-2-1 Backup Rule
Three copies of data: primary and two backups
Two different media types for backups
One backup stored offsite

Evrad KAMTCHOUM (CCMC (UBa)) Database Systems January 16, 2025 14 / 51

Recovery Strategies

Point-In-Time Recovery (PITR)

Restore database to a specific time
Combines full, incremental, and transaction log backups
Complete Recovery
Restore the entire database
Typically uses the latest full backup
Incomplete Recovery
Restore to a point before the failure
May involve data loss

Evrad KAMTCHOUM (CCMC (UBa)) Database Systems January 16, 2025 15 / 51

Types of Backups

Full Backup
Captures the entire database
Basis for other types of backups

Incremental Backup
Captures changes since the last backup
More storage-efficient

Differential Backup
Captures changes since the last full backup
Faster restoration than incremental backups

Evrad KAMTCHOUM (CCMC (UBa)) Database Systems January 16, 2025 16 / 51

Backup Methods

Physical Backup
Copying database files
Suitable for large databases
Examples: OS copy, RMAN for Oracle

Logical Backup
Exporting database objects and data
Portable across different database systems
Examples: mysqldump, pg dump

Evrad KAMTCHOUM (CCMC (UBa)) Database Systems January 16, 2025 17 / 51

 Recovery Options and Disaster Recovery Planning

Evrad KAMTCHOUM (CCMC (UBa)) Database Systems January 16, 2025 18 / 51

Disaster Recovery Planning

What is Disaster Recovery Planning?

Disaster Recovery Planning (DRP) is the process of creating a
documented approach with instructions to recover and protect a
business IT infrastructure in the event of a disaster.
It involves a set of policies, tools, and procedures to enable the
recovery or continuation of vital technology infrastructure and
systems.
The goal of DRP is to minimize the disruption of operations and
ensure the organization can continue to function or quickly resume
mission-critical functions.

Evrad KAMTCHOUM (CCMC (UBa)) Database Systems January 16, 2025 19 / 51

Disaster Recovery Planning and Its Importance

Importance of Disaster Recovery Planning

Minimizes Downtime: Ensures that business operations can be resumed quickly after a
disruption, minimizing downtime and associated costs.
Data Protection: Helps protect against data loss and corruption by ensuring that data
backups are available and can be restored.
Risk Management: Identifies potential threats and vulnerabilities, allowing the
organization to implement measures to mitigate these risks.
Compliance: Ensures that the organization meets industry regulations and standards
related to data protection and business continuity.
Customer Confidence: Demonstrates to customers and stakeholders that the organization
is prepared to handle disruptions, thereby maintaining trust and confidence.
Competitive Advantage: Organizations with effective DRP can recover faster than
competitors, ensuring continuity of service and reducing the impact of a disaster on the
market position.

Evrad KAMTCHOUM (CCMC (UBa)) Database Systems January 16, 2025 20 / 51

Key Components of a Disaster Recovery Plan

1. Risk Assessment
Identify potential threats (natural disasters, cyber-attacks, hardware failures)
Evaluate the likelihood and impact of each threat

2. Recovery Objectives
Recovery Time Objective (RTO): Maximum acceptable downtime before services are
restored
Recovery Point Objective (RPO): Maximum acceptable data loss in terms of time

3. Backup and Recovery Procedures

Detailed steps for performing backups and data recovery
Define roles and responsibilities for executing the plan
Ensure regular testing and updating of procedures

Evrad KAMTCHOUM (CCMC (UBa)) Database Systems January 16, 2025 21 / 51

Key Components of a Disaster Recovery Plan (2)

4. Offsite Storage
Store backups in geographically diverse locations
Utilize cloud storage solutions for redundancy

5. Communication Plan
Establish clear communication channels for stakeholders
Provide regular updates during the recovery process
Include contact information for key personnel and vendors

6. Testing and Maintenance

Regularly test disaster recovery plans to ensure effectiveness
Update plans based on test outcomes and changes in the environment
Conduct training for personnel involved in the recovery process
Evrad KAMTCHOUM (CCMC (UBa)) Database Systems January 16, 2025 22 / 51
Recovery Options

Full Backup
Complete copy of the entire database
Basis for other types of backups
Pros: Comprehensive and simple to restore
Cons: Time-consuming and storage-intensive

Incremental Backup
Copies only the changes since the last backup
Pros: Saves storage space and quicker backups
Cons: Longer recovery times as multiple backups may need to be
restored

Evrad KAMTCHOUM (CCMC (UBa)) Database Systems January 16, 2025 23 / 51

Recovery Options (2)

Differential Backup
Copies changes since the last full backup
Pros: Faster recovery than incremental backups
Cons: Storage requirements increase with time since the last full
backup

Continuous Backup
Captures all changes to the database as they happen
Pros: Minimizes data loss, real-time recovery
Cons: Requires significant storage and network resources

Evrad KAMTCHOUM (CCMC (UBa)) Database Systems January 16, 2025 24 / 51

 Practical Example: Implementing a Backup Strategy

1 -- Full backup using mysqldump

2 mysqldump -u root -p -- all - databases > / backup /
full_backup . sql
3
4 -- Incremental backup by copying binary logs
5 mysqladmin flush - logs
6 cp / var / log / mysql / mysql - bin .000001 / backup /
7

8 -- Differential backup using rsync ( for example

purposes )
9 rsync - av -- progress / var / lib / mysql / / backup /
mysql_diff /
10

Evrad KAMTCHOUM (CCMC (UBa)) Database Systems January 16, 2025 25 / 51

 Testing and Validating Backup and Recovery
Procedures

Evrad KAMTCHOUM (CCMC (UBa)) Database Systems January 16, 2025 26 / 51

Importance of Testing and Validating Backup and
Recovery Procedures

Ensuring Data Integrity

Regular testing helps to confirm that backups are complete and uncorrupted.
Validates that data can be accurately restored to its original state.

Minimizing Downtime
Identifies potential issues in the recovery process before a disaster occurs.
Ensures a quicker and more efficient recovery, reducing downtime.

Meeting Recovery Objectives

Verifies that Recovery Time Objective (RTO) and Recovery Point Objective (RPO) are
achievable.
Ensures that the organization can meet its recovery goals and minimize data loss.

Evrad KAMTCHOUM (CCMC (UBa)) Database Systems January 16, 2025 27 / 51

Importance of Testing and Validating Backup and
Recovery Procedures (2)

Regulatory Compliance
Many industries have regulations requiring regular testing of backup and recovery plans.
Ensures compliance with legal and regulatory requirements.

Improving Procedures
Identifies gaps and weaknesses in existing backup and recovery procedures.
Provides an opportunity to improve and update the procedures.

Training and Preparedness

Provides practical experience for the IT team, ensuring they are prepared for actual
disaster recovery.
Enhances the team’s readiness and confidence in handling real disaster scenarios.

Evrad KAMTCHOUM (CCMC (UBa)) Database Systems January 16, 2025 28 / 51

Objectives and Benefits of Regular Testing

Objectives of Regular Testing

Verify Backup Integrity: Ensure that all backups are complete and
free from corruption.
Assess Recovery Processes: Validate that recovery procedures are
effective and executable.
Meet RTO and RPO: Confirm that Recovery Time Objectives
(RTO) and Recovery Point Objectives (RPO) can be met.
Identify Weaknesses: Detect and address any gaps or weaknesses in
backup and recovery plans.
Compliance: Ensure adherence to industry regulations and standards.

Evrad KAMTCHOUM (CCMC (UBa)) Database Systems January 16, 2025 29 / 51

Objectives and Benefits of Regular Testing (2)

Benefits of Regular Testing

Minimize Downtime: Reduces the time required to restore
operations after a disaster.
Enhance Data Security: Protects against data loss and corruption
by ensuring backups are reliable.
Improve Confidence: Boosts confidence among stakeholders in the
organization’s disaster readiness.
Training and Preparedness: Provides practical experience for IT
staff, enhancing their ability to handle real incidents.
Continuous Improvement: Offers insights for improving and
updating backup and recovery procedures.

Evrad KAMTCHOUM (CCMC (UBa)) Database Systems January 16, 2025 30 / 51

Testing Backup Procedures

Steps for Testing Backup Procedures

Verify backup completion: Ensure that backups are completed
without errors.
Check backup integrity: Verify that the backup data is not corrupted.
Perform test restores: Regularly restore backups to test data integrity
and completeness.
Automate backup testing: Use automated tools to test backups
regularly and report any issues.

Evrad KAMTCHOUM (CCMC (UBa)) Database Systems January 16, 2025 31 / 51

Types of Backup Tests

Types of Backup Tests

Full restore test: Restore the entire database to a test environment.
Partial restore test: Restore a subset of data, such as specific tables
or files.
Point-in-time recovery test: Restore data to a specific point in time.

Evrad KAMTCHOUM (CCMC (UBa)) Database Systems January 16, 2025 32 / 51

Testing Recovery Procedures

Steps for Testing Recovery Procedures

Develop a recovery plan: Document the steps required to recover
from a disaster.
Simulate disaster scenarios: Create realistic scenarios to test the
recovery plan.
Execute the recovery plan: Follow the documented steps to recover
data and services.
Evaluate recovery time: Measure the time taken to complete the
recovery process.
Identify and address issues: Document any issues encountered and
update the recovery plan accordingly.

Evrad KAMTCHOUM (CCMC (UBa)) Database Systems January 16, 2025 33 / 51

Types of Recovery Tests

Types of Recovery Tests

Tabletop exercises: Conduct theoretical exercises with key personnel
to discuss the recovery process.
Functional tests: Perform practical tests to recover specific
components or services.
Full-scale drills: Execute the entire recovery plan in a controlled
environment to ensure readiness.

Evrad KAMTCHOUM (CCMC (UBa)) Database Systems January 16, 2025 34 / 51

Validating Backup and Recovery Procedures

Criteria for Validation

Data integrity: Ensure that restored data is complete and
uncorrupted.
Recovery objectives: Verify that Recovery Time Objective (RTO) and
Recovery Point Objective (RPO) are met.
Procedural accuracy: Ensure that documented procedures are
accurate and effective.
Personnel readiness: Confirm that staff are trained and capable of
executing recovery procedures.

Evrad KAMTCHOUM (CCMC (UBa)) Database Systems January 16, 2025 35 / 51

Validating Backup and Recovery Procedures (2)

Documentation and Reporting

Record test results: Document the outcomes of all backup and
recovery tests.
Identify improvements: Note any areas for improvement and update
procedures accordingly.
Regular reviews: Schedule periodic reviews of backup and recovery
procedures to ensure ongoing effectiveness.

Evrad KAMTCHOUM (CCMC (UBa)) Database Systems January 16, 2025 36 / 51

 Practical Example: Testing a Backup and Recovery Plan

1 -- Simulate a full restore from a backup file

2 mysql -u root -p < / backup / full_backup . sql
3
4 -- Test partial restore of a specific table
5 mysql -u root -p -e " USE mydatabase ; DROP TABLE IF
EXISTS users ; SOURCE / backup / users_table . sql ; "
6

7 -- Verify data integrity after restore

8 mysql -u root -p -e " SELECT COUNT (*) FROM mydatabase .
users ; "
9

Evrad KAMTCHOUM (CCMC (UBa)) Database Systems January 16, 2025 37 / 51

 Automated Backup and Recovery Tools and Processes

Evrad KAMTCHOUM (CCMC (UBa)) Database Systems January 16, 2025 38 / 51

Importance of Automation in Backup and Recovery

Efficiency and Time Savings

Automates repetitive and time-consuming tasks.
Frees up IT staff to focus on more strategic activities.
Reduces the time required to perform backups and recoveries.

Consistency and Reliability

Ensures consistent execution of backup and recovery tasks.
Minimizes the risk of human error during the backup process.
Provides reliable and repeatable processes.

Scalability
Easily scales to accommodate growing data volumes.
Adapts to changes in the IT environment with minimal manual intervention.
Supports complex and large-scale backup operations.

Evrad KAMTCHOUM (CCMC (UBa)) Database Systems January 16, 2025 39 / 51

Importance of Automation in Backup and Recovery (2)

Compliance and Reporting

Generates detailed logs and reports automatically.
Ensures adherence to regulatory requirements and internal policies.
Provides audit trails for compliance and review.

Rapid Recovery
Speeds up the recovery process by automating restoration tasks.
Reduces downtime and minimizes the impact on business operations.
Enables quick and efficient disaster recovery.

Evrad KAMTCHOUM (CCMC (UBa)) Database Systems January 16, 2025 40 / 51

Benefits of Automated Backup and Recovery

Efficiency and Time Savings

Automates repetitive tasks, saving time
Reduces the need for manual intervention

Consistency and Reliability

Ensures consistent execution of backup and recovery tasks
Reduces the risk of human error

Scalability
Easily scales to accommodate growing data volumes
Adapts to changes in the IT environment

Compliance and Reporting

Provides detailed logs and reports for auditing
Ensures compliance with regulatory requirements

Evrad KAMTCHOUM (CCMC (UBa)) Database Systems January 16, 2025 41 / 51

Common Automated Backup Tools

Bacula: Open-source, enterprise-level backup solution

Veeam: Comprehensive backup and disaster recovery software

Acronis: Integrated backup and cybersecurity solution

Commvault: Data protection and information management software

IBM Spectrum Protect: Enterprise data backup and recovery

solution

Evrad KAMTCHOUM (CCMC (UBa)) Database Systems January 16, 2025 42 / 51

Automated Backup Processes

Full Backups
Backs up all data at once
Typically scheduled periodically (e.g., weekly)

Incremental Backups
Backs up only the data that has changed since the last backup
Reduces backup time and storage space

Differential Backups
Backs up data changed since the last full backup
Balances between full and incremental backups

Automated Backup Scheduling

Configures backup jobs to run at specified intervals
Ensures regular and consistent backups

Evrad KAMTCHOUM (CCMC (UBa)) Database Systems January 16, 2025 43 / 51

Automated Recovery Processes

Recovery Point Objective (RPO)

Defines the maximum acceptable amount of data loss
Determines the frequency of backups

Recovery Time Objective (RTO)

Defines the maximum acceptable time to restore data
Guides the design of recovery procedures

Automated Recovery Testing

Regularly tests recovery procedures to ensure they work
Uses automation to simulate disaster recovery scenarios

Evrad KAMTCHOUM (CCMC (UBa)) Database Systems January 16, 2025 44 / 51

 Practical Example: Automating Backups with Bacula

1 # Install Bacula
2 s u d o apt−g e t install bacula
3
4 # Configure Bacula Director for automated backups
5 vim / e t c / b a c u l a / b a c u l a −d i r . c o n f
6
7 # Define backup job
8 Job {
9 Name = ” B a c k u p C l i e n t 1 ”
10 JobDefs = ” DefaultJob ”
11 F i l e S e t=” F u l l S e t ”
12 Schedule = ” WeeklyCycle ”
13 Storage = F i l e
14 Messages = Standard
15 Pool = D e f a u l t
16 P r i o r i t y = 10
17 }
18
19 # Reload Bacula Director
20 s u d o s y s t e m c t l r e l o a d b a c u l a −d i r e c t o r
21

Evrad KAMTCHOUM (CCMC (UBa)) Database Systems January 16, 2025 45 / 51

Exercise: Backup and Recovery

Objective
Implement a backup and recovery strategy for a database system, ensuring both data integrity
and security.

Instructions
1 Backup Strategy:
Schedule regular full and incremental backups using an automated tool (e.g., Bacula, pgBackRest).
Ensure that backups are stored in a secure location with appropriate access controls.

2 Security Measures:
Encrypt backups to protect sensitive data.
Implement access control to restrict who can initiate and restore backups.
Ensure backups are transferred and stored securely to prevent unauthorized access.

3 Recovery Plan:
Document the steps required to restore the database from a backup.
Test the recovery process regularly to ensure it works as expected.
Implement measures to verify the integrity of restored data.

4 Compliance:
Ensure the backup and recovery strategy complies with relevant regulations (e.g., GDPR, HIPAA).
Maintain logs and audit trails for backup and recovery operations.

Evrad KAMTCHOUM (CCMC (UBa)) Database Systems January 16, 2025 46 / 51

Exercise: Backup and Recovery (cont’d)

Deliverables
A documented backup and recovery plan.
Scripts or configuration files for automated backups.
A report on the security measures implemented for backups.
Evidence of a successful recovery test.

Evrad KAMTCHOUM (CCMC (UBa)) Database Systems January 16, 2025 47 / 51

Solution: Backup and Recovery

Implemented Backup Strategy

Backup Schedule:
Full backups every Sunday night at 2:00 AM using Bacula.
Incremental backups every other night at 2:00 AM.
Storage Location:
Backups are stored in an encrypted network drive accessible only to authorized
personnel.

Security Measures Implemented

Encryption:
AES-256 encryption used for all backups.
Access Control:
Only database administrators have access to initiate and restore backups.
Secure Transfer and Storage:
Backups are transferred over SSL/TLS and stored encrypted to prevent
unauthorized access.

Evrad KAMTCHOUM (CCMC (UBa)) Database Systems January 16, 2025 48 / 51

Solution: Backup and Recovery (2)

Recovery Plan
Documentation: - Detailed documentation outlining step-by-step recovery procedures.
Testing: - Monthly recovery tests conducted to verify the integrity of backups and
recovery procedures.
Data Integrity Verification: - MD5 checksums are used to verify the integrity of restored
data.

Compliance and Audit Trails

Regulatory Compliance: - Backup strategy complies with GDPR and internal data
protection policies.
Audit Trails: - Logs maintained for all backup and recovery operations for compliance and
review purposes.

Conclusion
The implemented backup and recovery strategy ensures data availability, integrity, and security,
meeting both regulatory requirements and organizational needs.

Evrad KAMTCHOUM (CCMC (UBa)) Database Systems January 16, 2025 49 / 51

 Conclusion

Evrad KAMTCHOUM (CCMC (UBa)) Database Systems January 16, 2025 50 / 51

Conclusion

Key Takeaways
Importance of Backup and Recovery: Essential for data protection
and business continuity.
Types of Backups: Full, incremental, and differential backups each
serve different purposes.
Automated Tools: Utilize tools like Bacula, Veeam, and Acronis to
streamline backup processes.
Recovery Processes: Understand and implement Recovery Point
Objective (RPO) and Recovery Time Objective (RTO).
Regular Testing: Regularly test backup and recovery procedures to
ensure reliability and compliance.

Evrad KAMTCHOUM (CCMC (UBa)) Database Systems January 16, 2025 51 / 51