Re: Encryption in OLAP

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: Dave Wickert [MSFT] (dwickert_at_online.microsoft.com)
Date: 12/07/04 

Date: Tue, 7 Dec 2004 06:30:57 -0800

Sorry. There is no way that I know of to limit what *type* of client can
connect through PTS.
You can limit which users have access to a database, but not what tool they
can use. 

-- 
Dave Wickert [MSFT]
dwickert@online.microsoft.com
Program Manager
BI SystemsTeam
SQL BI Product Unit (Analysis Services)
--
This posting is provided "AS IS" with no warranties, and confers no rights.
"Radzi Ibrahim" <ribrahim@abc.imshealth.com> wrote in message
news:BDDBA519.1422%ribrahim@abc.imshealth.com...
> Hi,
>
> Thanks for the clarification and sorry for the misunderstanding. What I
what
> to do is to deliver to my client a olap cube, to be restored in an
analysis
> server. But what I don't want them to do is to use any standard cube
> browser, such as excel, to look at the data. I want them to use my own
> viewer to read the data, so that I can control the number of copies they
are
> using.
>
> TIA.
>
> Radzi.
>
> On 7-12-2004 3:13 PM, in article ew6fAxC3EHA.2624@TK2MSFTNGP11.phx.gbl,
> "Dave Wickert [MSFT]" <dwickert@online.microsoft.com> wrote:
>
> > Interesting . . . It would help if you clarify you goals a bit.
> > Can you please define "non-authorized" people?
> > What kind of threat attack are you looking to cover with encryption?
> >
> > Analysis Services uses NT integrated security so a non-authorized person
> > would have to break into NT to look like an authorized users -- and
> > authorized users obviously would have to the data decrypted for them to
see.
> > Or are you worried about non-authorized people sniffing the network wire
and
> > reverse engineering the data stream being passed from server to
authorized
> > user. Or are you worried about users walking away with the underlying
data
> > from your server and then breaking into the data files directly? As you
are
> > guessing, each of these threats need to be handled differently.
> >
> > There are some recent books out there on software threat modelling that
> > would be a great resource for you. My favorite one is:
> > Threat Modeling, by Frank L. Swiderski, Window Snyder
> >
http://search.barnesandnoble.com/booksearch/isbnInquiry.asp?isbn=0735619913
> >
> > And oldie but goodie:
> > Writing Secure Code, Second Edition, by Michael Howard
> >
http://search.barnesandnoble.com/booksearch/isbnInquiry.asp?isbn=0735617228
> >
> >
> > Hope this helps.
>
>

Relevant Pages

  • Re: Encryption in OLAP
    ... to do is to deliver to my client a olap cube, to be restored in an analysis ... > What kind of threat attack are you looking to cover with encryption? ... > authorized users obviously would have to the data decrypted for them to see. ... > reverse engineering the data stream being passed from server to authorized ...
    (microsoft.public.sqlserver.olap)
  • Re: Re. Suse 10.
    ... But anyway, 9.3 is still a current version, any updated drivers ... threat when you have a new question." ... conversation come argument with me saying its safe and him saying I needed ... I set about installing a scsi drive onto a mirror server, ...
    (alt.os.linux.suse)
  • Re: Re. Suse 10.
    ... But anyway, 9.3 is still a current version, any updated drivers ... threat when you have a new question." ... conversation come argument with me saying its safe and him saying I needed ... I set about installing a scsi drive onto a mirror server, ...
    (alt.os.linux.suse)
  • Re: Securing PHP
    ... You are checking for attacks coming from your own web server? ... is the situation with frames, Google doesn't have a chance to mess ... a specific IP address or piece of hardware (and a web server belonging ... Threat: Someone/something wants to have your site distribute viruses. ...
    (comp.lang.php)
  • RE: DNS cache poisoning and pharming
    ... Imho this is a serious threat that every sysadmin and ISO should be ... to trick users to connect to a rogue DNS server which contains records ... example) but pharming is an entirely different story. ... DNS cache poisoning and pharming ...
    (Security-Basics)