Penetration Testing mailing list archives
Database encryption
From: "Dan Tesch" <dan.tesch () comcast net>
Date: Thu, 23 Sep 2004 14:31:00 -0500
I am not a database person but I am working with an e-commerce company that is using a package that runs on MSSQL but does not offer database encryption (for stored credit card#'s). The vendor of the platform states that someone would have to have an intimate knowledge of their data structures in order to even find where the cc#'s are stored and doesn't plan to offer it any time soon. Can I get from some comments on this - off forum if necessary? Thanks ------------------------------------------------------------------------------ Ethical Hacking at the InfoSec Institute. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors. Check out our Advanced Hacking course, learn to write exploits and attack security infrastructure. Attend a course taught by an expert instructor with years of in-the-field pen testing experience in our state of the art hacking lab. Master the skills of an Ethical Hacker to better assess the security of your organization. http://www.infosecinstitute.com/courses/ethical_hacking_training.html -------------------------------------------------------------------------------
Current thread:
- Database encryption Dan Tesch (Sep 25)