Re: security against dbaŽs

[Ansgar Wiechers <bugtraq () planetcobalt net>]

On 2009-02-13 Adam Pal wrote:
> Certainly you can have the key stored on the same system without
> loosing security, lets use for instance a FIPS 140-2 certified device.

Let's use a system that is typical for running database servers, shall
we?

> Then lets load the "super key" into the machines protected memory,

I'm not familiar with FIPS 140-2, so maybe these are stupid questions,
but still: How do you load that "super key" into the protected memory
without local users being able to get hold of it? From where are you
loading it? How is ensured that local users can't access the key in the
protected memory?

> so once loaded is functionaly and kills itself in case of intrusion.

To be able to act on an intrusion, you have to *detect* the intrusion in
the first place. On top of that, even if you did detect an intrusion,
how do you ensure that the attacker isn't able to get the information he
wants before the system is shut down (or whatever)?

Regards
Ansgar Wiechers
-- 
"All vulnerabilities deserve a public fear period prior to patches
becoming available."
--Jason Coombs on Bugtraq