Unix Technical Forum

Securing Databases From Porting

This is a discussion on Securing Databases From Porting within the SQL Server forums, part of the Microsoft SQL Server category; --> I have a situation where I have an app that uses a sql server (msde) database. The app will ...


Go Back   Unix Technical Forum > Database Server Software > Microsoft SQL Server > SQL Server

Register FAQ Members List Calendar Search Today's Posts Mark Forums Read
  #1 (permalink)  
Old 02-29-2008, 05:18 AM
AMK
 
Posts: n/a
Default Securing Databases From Porting

I have a situation where I have an app that uses a sql server (msde)
database. The app will be used in environments where no one should be
able to manipulate the data except the developers (app admins) - not
even site database admins. When the application and msde is installed,
a default instance of the database gets attached to msde or built by
script. by default, a built in server acct and approle acct exist to
secure the data accordingly with passwords concealed. What can be done
to keep someone from copying the mdf and ldf files to another machine
where they have admin rights and manipulating data?

Thanks.

Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
  #2 (permalink)  
Old 02-29-2008, 05:18 AM
John Bell
 
Posts: n/a
Default Re: Securing Databases From Porting

Hi

Stopping a really determined administrator getting access to this is
virtually impossible.

You may want to look at some of the encryption products
http://www.sqlsecurity.com/DesktopDefault.aspx?tabid=30
the information on Encryptionizer says it will do this, but how it protects
it's keys I don't know.

John

"AMK" <kitchenam@hotmail.com> wrote in message
news:1103750120.048433.13570@z14g2000cwz.googlegro ups.com...
>I have a situation where I have an app that uses a sql server (msde)
> database. The app will be used in environments where no one should be
> able to manipulate the data except the developers (app admins) - not
> even site database admins. When the application and msde is installed,
> a default instance of the database gets attached to msde or built by
> script. by default, a built in server acct and approle acct exist to
> secure the data accordingly with passwords concealed. What can be done
> to keep someone from copying the mdf and ldf files to another machine
> where they have admin rights and manipulating data?
>
> Thanks.
>



Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
Reply


Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On
Forum Jump


All times are GMT. The time now is 02:54 PM.


Powered by vBulletin® Version 3.6.5
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
SEO by vBSEO 3.2.0
www.UnixAdminTalk.com