SQL Clone
SQLServerCentral is supported by Redgate
Log in  ::  Register  ::  Not logged in

Employee Slurping

By Steve Jones,

This editorial was originally published on Oct 21, 2006. It is being re-run as Steve is out at SQL in the City today.

I'm not talking about soup at the employee cafeteria or summer trips to 7-11, but rather the newest definition of slurping: siphoning off data with portable storage devices. It started to become a big concern with the wide deployment of iPods with their 20+GB storage capacity and easy connection to PCs. The advent of this scale of portable device, made more disturbing because of their benign appearance, has raised the concern of IT security folks. Now someone could appear to be listening to music while doing their work and siphon off an entire database!

Now a number of companies are starting to build software to secure USB devices and help prevent data theft. And they're taking an interesting approach, similar to that taken by networks: they control the access to USB devices at the PC level.

This is a step in the right direction, but it still doesn't limit what data can be downloaded to the device if USB access is enabled. It does report on access, which is probably as important as blocking the transfer. Being able to respond to security events and track them down is critical since someone will always find ways around the limits you impose.

The is of particular concern for DBAs as the sizes of these devices grow close to that of our databases. Losing a record or two of data is one thing. Losing an entire database is something else.

Total article views: 169 | Views in the last 30 days: 1
Related Articles

Linked Servers and Security Concerns

What are all the possible security concerns linking two or more servers?


Cloud Concerns

Security is a concern in the cloud, but should it be your number one concern? Steve Jones notes that...


Lots of Security Concerns

This past week saw lots of security concerns, especially around data. Steve Jones has a few comments...


DBA Concerns

A survey of Oracle DBAs shows them having a number of security concerns. Steve Jones thinks that a s...


Stairway to SQL Server Security Level 7: Security Across Databases with Cross-Database Ownership Chaining

Sometimes you need to reach outside a database and access data and objects from multiple databases, ...