Re: Securing data from Database Admin

How about just encrypting the fields in the database? This way the
application and application developers will have access to usable
(i.e. decrypted) data whereas the Database Administrators will only
see encrypted data but will still be able to perform their job
(backup, restore etc).

I was looking into MS SQL's built-in encryption to do something
similar to what you are trying to do. I haven't tried it yet, so I
can't give you the specifics. But I know it works, and you can control
access using AD groups.

saqib
http://doctrina.wordpress.com/


On Thu, Mar 27, 2008 at 11:40 AM, WALI <hkhasgiwale@xxxxxxxxx> wrote:
Is there a way we can secure data within (Oracle 9i) database? Supposingly
there is an application developed by internal developers and it's backend
database is administered by a DB Admin. There is no segregation of duties
between development and live environments due to resource constraints.

Is there a way data can be protected from being revealed to or being
tempered by DB Admin? He would only be called in when there's some kind of
malfunction that too under the watchful eyes of project team leader.

Any thoughts to bring in preventive/detective controls over DB Admin
activities?





--
Saqib Ali, CISSP, ISSAP
http://www.full-disk-encryption.net

Relevant Pages

  • Re: Datebase needed for tracking of drugs for a fire department!
    ... including for MS Access database development. ... There are good developers, don't get me wrong, but one has to ... Excel makes you think in math calculations. ... Shelf life of the drug could be loaded once and then access ...
    (microsoft.public.access.tablesdbdesign)
  • Re: WHY
    ... I've been working a lot longer than that LoL ... re-creating the same spreadsheet, ... > I'm sure the database admins do all the work at, say, Boeing and Airbus, ... > Or perhaps you meant implicitly to restrict your remarks to developers. ...
    (microsoft.public.excel)
  • Re: compilers
    ... Pick is superb for the database and the business rules, ... I'll be happy to look hard at OpenQM if I ... This means that whatever back-end database I have to use needs to support ... positions that I do because they are developers, ...
    (comp.databases.pick)
  • Re: Need help on how to organize users and objects
    ... I could assign a custom database role to them though. ... In 2005, if a user creates an sp, which schema does it belong to? ... Security is a huge subject in SQL Server 2005, so I'd suggest you to spend ... the sysadmin; developers and viewers. ...
    (microsoft.public.sqlserver.security)
  • Re: general concerns regarding hacking of .NET assemblies
    ... >> CLI metadata to more or less random names, and optionally encrypting ... >> passwords used to access remote data, like a database server). ... >> Of course the password is encrypted in the file, but once the hacker finds ... > in .Net to sign your assemblies with a strong name, ...
    (microsoft.public.dotnet.security)