SSL - TLS White Papers

Securing Data at Rest - Developing a Database Encryption Strategy

Overview Most security initiatives are defense strategies - aimed at protecting the perimeter of the network. But these efforts may ignore a crucial vulnerability - sensitive data stored on networked severs are at risk from attackers who only need to find one way inside the network to access this confidential information. Additionally, perimeter defenses like firewalls cannot protect stored sensitive data from the internal threat - employees with the means to access and exploit this data. Encryption can provide strong security for data at rest, but developing a database encryption strategy must take many factors in consideration. Where should the encryption be performed, for example - in the database, or in the application where the data originates? Who should have access to the encryption keys? How much data must be encrypted to provide security? What's an acceptable trade-off between data and security and application performance? This paper examines the issues of implementing database encryption and makes recommendations that will help your company develop a strategy that will meet your individual needs.

Further White Paper Details
PublisherRSA Security File FormatPDF, requires Acrobat Rdr 5
Date PublishedJanuary 2002 Downloads40
FormatWhite Papers   
Topics

Quick Sitemap Links: