PaulDotCom mailing list archives
Database Encryption
From: rd at rd1.net (Ralph Durkee)
Date: Wed, 26 May 2010 10:45:04 -0400
I did a presentation last year for the Rochester OWASP on Database Encryption that is likely to be useful. I recommended Oracle DBMS_CRYPTO rather than the TDE, or since it isn't going to provide protection against most application level attacks. Rochester OWASP Web site: http://www.owasp.org/rochester Specific presentation: http://www.owasp.org/images/c/c1/Database_Encryption.ppt -- Ralph Durkee, CISSP, GSEC, GCIH, GSNA, GPEN Principal Security Consultant http://rd1.net On 5/25/2010 10:22 AM, John Hoyt wrote:
Does anyone have experience with database (row/record) encryption? I'm looking at Oracle TDE and other competitor solutions. Some of the main points I'm interested in are: * Performance * Key management * Backups * Comparison against full-disk encryption Thanks for any help, John _______________________________________________ Pauldotcom mailing list Pauldotcom at mail.pauldotcom.com http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom Main Web Site: http://pauldotcom.com
-------------- next part -------------- An HTML attachment was scrubbed... URL: http://mail.pauldotcom.com/pipermail/pauldotcom/attachments/20100526/7b0db427/attachment.htm
Current thread:
- Database Encryption John Hoyt (May 25)
- Database Encryption Raffi Jamgotchian (May 25)
- Database Encryption Ben Greenfield (May 26)
- Database Encryption Jim Halfpenny (May 26)
- Database Encryption Ralph Durkee (May 26)
- <Possible follow-ups>
- Database Encryption Robert Wahl (May 26)
- Database Encryption John Hoyt (May 27)
- Database Encryption Michael McGrew (May 27)
- Database Encryption John Hoyt (May 27)
- Database Encryption Raffi Jamgotchian (May 25)