Re: Securing local sql server express MDF/LDF
- From: "Arnie Rowland" <arnie@xxxxxxxx>
- Date: Mon, 11 Sep 2006 11:53:53 -0700
I believe that the datafiles cannot be copied IF the server is running, and
the database is attached. So make sure that the users do not have sa account
or sysadmin privileges to the server -that includes local admin account
access to the computer.
Backup files, however, are vulnerable to copying. I would consider secure
storage for backups. EFS can be successfully used for backup file storage.
--
Arnie Rowland, Ph.D.
Westwood Consulting, Inc
Most good judgment comes from experience.
Most experience comes from bad judgment.
- Anonymous
<tofu.captain@xxxxxxxxx> wrote in message
news:1157999953.783810.311210@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
I am developing a .net application that uses a local sql server express
database. I am concerned about the security of the local database as
the user of the application can navigate to the installation directory
and copy the files.
My question is: How can I secure these files?
My concerns:
1. I have read about EFS and do not think this is a viable solution
when the application is deployed.
2. Encrypting all fields of the database will probably cause too much
overhead in the application. Is there any fast encrypt/decrypt methods
available?
3. Are there any third party tools that can either solve my issue at
either the file level or database field level?
.
- References:
- Securing local sql server express MDF/LDF
- From: tofu . captain
- Securing local sql server express MDF/LDF
- Prev by Date: Re: Tools For Scanning Data?
- Next by Date: How do I change a user's password ?[SQL2k]
- Previous by thread: Securing local sql server express MDF/LDF
- Next by thread: How do I change a user's password ?[SQL2k]
- Index(es):
Relevant Pages
|
|
