Database Encryption

[rd at rd1.net (Ralph Durkee)]

I did a presentation last year for the Rochester OWASP on Database 
Encryption that is likely to be useful.  I recommended Oracle 
DBMS_CRYPTO rather than the TDE, or since it isn't going to provide 
protection against most application level attacks.

Rochester OWASP Web site:  http://www.owasp.org/rochester
Specific presentation:  
http://www.owasp.org/images/c/c1/Database_Encryption.ppt

-- Ralph Durkee, CISSP, GSEC, GCIH, GSNA, GPEN
Principal Security Consultant
http://rd1.net


On 5/25/2010 10:22 AM, John Hoyt wrote:
> Does anyone have experience with database (row/record) encryption?  
> I'm looking at Oracle TDE and other competitor solutions.
>
> Some of the main points I'm interested in are:
>
>     * Performance
>     * Key management
>     * Backups
>     * Comparison against full-disk encryption
>
>
> Thanks for any help,
> John
>
>
>
>
> _______________________________________________
> Pauldotcom mailing list
> Pauldotcom at mail.pauldotcom.com
> http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
> Main Web Site: http://pauldotcom.com
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mail.pauldotcom.com/pipermail/pauldotcom/attachments/20100526/7b0db427/attachment.htm