Re: Database Protection

From: Eric Chamberlain, CISSP (eric.chamberlain_at_newsgroups.nospam)
Date: 06/16/04

  • Next message: Eric Chamberlain, CISSP: "Re: Prudent or Paranoid?" 
    Date: Tue, 15 Jun 2004 19:45:21 -0700

    MS SQL doesn't have native encryption capabilities, but third parties do
    make plug-ins. You might have better luck asking in the sql security
    groups. There are entire books devoted to SQL server security. The basics
    are don't let the users have administrative (OS or DB) access to the server
    and don't let them make queries directly to the database, use stored
    procedures to limit what data they can retrieve. 

    -- 
Eric Chamberlain, CISSP
"John Barwell" <johnbarwell@msmdirect.co.uk> wrote in message
news:CCEzc.15517$NK4.2491979@stones.force9.net...
> Dear All,
>
> I run a win2k domain. We will be bringing a bespoke SQL database system on
> board in a few weeks. I want to ensure the integratity of this database by
> putting some security measures in place. I have concerns that individuals
> may try to take the database to a competitor by copying it on to CD or
> sending it through email. I would like to put something in place that will
> make the database useless if it goes outside my domain. Has anyone got any
> ideas? Encryption?
>
> Many Thanks,
>
>
> John
>
>
  • Next message: Eric Chamberlain, CISSP: "Re: Prudent or Paranoid?"

    Relevant Pages