In recent post on this blog, I mentioned that Enterprise Strategy Group released a research paper comparing the security of Microsoft SQL Server with Oracle and MySQL. This news has been posted on Michael Howard’s blog and many people criticized there the data used in the report titled “Microsoft SQL Server Runs the Security Table”.
David Litchfield has done some of his own research, and created a report comparing SQL Server and Oracle, titled “Which database is more secure? Oracle vs. Microsoft“. You can read full report here.