Click here to monitor SSC
SQLServerCentral is supported by Red Gate Software Ltd.
 
Log in  ::  Register  ::  Not logged in
 
 
 

It's Time for Encryption

By Andy Warren,

http://rfayoumi.files.wordpress.com/2007/11/encryption.png?w=206&h=199Imagine withdrawing your life savings and putting into a bomb proof container, and that the container only had one key. If the key was lost you would also lose your life savings. It’s scary to downright frightening to think that something so easy to lose could in turn cause you to lose everything. On the other hand, imagine withdrawing your life savings and putting into a very secure room; stout doors, good locks, cameras recording everything, and only a few people you trust have access to the room. Which is the safer and more secure alternative? Not a simple question is it?

Maybe those aren't the best examples, but I think you know what I mean - fear has been the biggest hurdle to adoption of encryption as a routine security measure for databases. We fear the loss of keys, the loss of performance, and the loss of simplicity once we add encryption to our already complex environments. We've grown comfortable with the idea that with our servers in 'ring zero' there is little chance of the machines being compromised.

But, imagine the worst happens and someone breaches the server room and takes drives or tapes containing sensitive data. Is it enough to say that we locked the door every night, or will people ask if there was more we could have done?

I think database security is a lot like home security. We take the precautions that we can afford, stick to, and that make sense given the environment and the value of the items we want to protect. With the addition of transparent data encryption (TDE) in SQL 2008 I think we've reached the tipping point where we as DBA's should declare ALL data as sensitive and encrypt it all. It's in the box, it's relatively easy to use, and once applied doesn't demand a lot of attention from us.

Total article views: 203 | Views in the last 30 days: 3
 
Related Articles
ARTICLE

Encrypt Everything

Yahoo recently announced they are encrypting their traffic between data centers. Steve Jones thinks ...

FORUM

sql 2005 encryption

encryption

FORUM

Problem with encryption

encryption

ARTICLE

We Need to Learn Encryption

With all the recent worms and attacks out there, it's only a matter of time before someone focuses m...

BLOG

SQL Server Data Encryption Options

SQL Server Data Encryption Types Businesses today have a greater need than ever to protect their ...

Tags
editorial    
encryption    
 
Contribute

Join the most active online SQL Server Community

SQL knowledge, delivered daily, free:

Email address:  

You make SSC a better place

As a member of SQLServerCentral, you get free access to loads of fresh content: thousands of articles and SQL scripts, a library of free eBooks, a weekly database news roundup, a great Q & A platform… And it’s our huge, buzzing community of SQL Server Professionals that makes it such a success.

Join us!

Steve Jones
Editor, SQLServerCentral.com

Already a member? Jump in:

Email address:   Password:   Remember me: Forgotten your password?
Steve Jones