Hot answers tagged encryption
14
Your problem boils down to access control.
The first defense I'd propose is to simply deny access to the untrusted users. If they can't get into the database, they can't query the database and get at the sensitive data.
If they must be allowed to access the database server, you can look at either explicitly granting them read permission to the tables they ...
7
The only way to use encryption to protect the data against your own administrators/IT is when the user enters the decryption password him/herself, every time it queries the data. If your application presents the user with a password dialog and then issues an OPEN SYMMETRIC KEY ... DECRYPTION BY CERTIFICATE ... WTIHT PASSWORD ... (or some equivalent) to open ...
5
It is totally NOT what you neeed.
Assuming the servers stay online it wont help because it is transparent - and the junior admins "querying the database" must be able to connect and issue a sql statement (file access is blocked as long as the db server runs) and that - means the encryption wont "work".
Transparent Encryption helps for someone walking out ...
Only top voted, non community-wiki answers of a minimum length are eligible
