I am building a database driven web application. The web application is basically an E-Voting website, where users can register and vote on things that concern their community ... etc.
The database engine in use is SQL Server Express 2008. I know that my Domain Model and Application Code does not allow any silly security breaches, e.g. a User viewing the vote of other users ... etc.
But that aside, are there things (free) I can do to make my database secure? So even if a hacker gets access to my Db, he can't do anything with it? or make it very hard for him.
I realise this question can be a little bit open ended, but some simple tips would be greatly appreciated.