OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: Encrypted storage

From: Martin Sarsale (martinemepe3.net)
Date: Thu Sep 09 2004 - 10:39:33 CDT


I found this, some months ago

A Database Encryption Solution That Is Protecting Against External And
Internal Threats, And Meeting Regulatory Requirements
http://www.net-security.org/article.php?id=715

On Wed, 2004-09-08 at 17:38, Jeffrey Koniszewski wrote:
> I was wondering (because customers have asked me) whether anyone is configuring their database to store all information encrypted. Databases have this capability but the overhead can be so heavy that vendors don't recommend using it generically. Also, if most of the data is not sensitive it is a lot of work to protect small amounts of data. Is anyone aware of someone using this capability? Under what circumstances? What's the performance hit? What other gotchas? How about encrypted communication to the DB from the app server?
>

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)

iD8DBQBBQHk1hruVGj+ub3MRAnBMAKCXje2XrgZ1OGvxkpwBBcpra3lvcQCfeOTT
VlRDh76WXWVXDvo23nxxOFc=
=uu9E
-----END PGP SIGNATURE-----