SSL - TLS White Papers
Securing Data at Rest - Developing a Database Encryption Strategy
Overview Most security initiatives are defense strategies - aimed at protecting the perimeter of the network. But these efforts may ignore a crucial vulnerability - sensitive data stored on networked severs are at risk from attackers who only need to find one way inside the network to access this confidential information. Additionally, perimeter defenses like firewalls cannot protect stored sensitive data from the internal threat - employees with the means to access and exploit this data. Encryption can provide strong security for data at rest, but developing a database encryption strategy must take many factors in consideration. Where should the encryption be performed, for example - in the database, or in the application where the data originates? Who should have access to the encryption keys? How much data must be encrypted to provide security? What's an acceptable trade-off between data and security and application performance? This paper examines the issues of implementing database encryption and makes recommendations that will help your company develop a strategy that will meet your individual needs.
| Publisher | RSA Security | File Format | PDF, requires Acrobat Rdr 5 |
|---|---|---|---|
| Date Published | January 2002 | Downloads | 40 |
| Format | White Papers | ||
| Topics | |||


