Re: Securing an MDF file

From: Brian McGuigan (BrianMcGuigan_at_discussions.microsoft.com)
Date: 07/27/04


Date: Tue, 27 Jul 2004 14:53:02 -0700

We are not trying to protect the logic particularly. What we want to protect is the way we have structured our Tables. It is a proprietary application and much of the intellectual property is in the way the Tables themselves are structured.

We have developed an Access project application and packaged it with MSDE which can be installed on many customers networks. We just don't wish to publish how we have done what we have done.

"Mike Epprecht (SQL MVP)" wrote:

> And since he can't get to the DB, he can't backup the database, so you
> better be ready to re-capture the data the user has entered.
>
> If you have some really critical proprietary logic, don't put it into a DB,
> put into the middle tier of your application.
>
> --
> --------------------------------
> Mike Epprecht, Microsoft SQL Server MVP
> Johannesburg, South Africa
> Mobile: +27-82-552-0268
> IM: mike@epprecht.net
>
> MVP Program: http://www.microsoft.com/mvp
>
> Blog: http://www.msmvps.com/epprecht/
>
> "Wayne Snyder" <wayne.nospam.snyder@mariner-usa.com> wrote in message
> news:u4ayTy8cEHA.1764@TK2MSFTNGP10.phx.gbl...
> > There are a couple of issues here I think..
> >
> > I do not think that MS recommends using EFS with SQL... It would surely
> slow
> > performance down.
> >
> > If the other DBA has the login information for your server install, there
> is
> > nothing you can do to protect yourself from him... My question here would
> > be, Why is there someone on the job who is not trustworthy..?
> >
> > In any case...If the other DBA is NOT a server admin, You can run YOUR
> > instance of SQL Server under a different NT account than the other DBAs
> > server. Remove login permissions for the builtin/administrators account
> from
> > your server, after adding your own login as a SQL Admin. Then the other
> DBA
> > can not do anything on your server...
> >
> > --
> > Wayne Snyder, MCDBA, SQL Server MVP
> > Mariner, Charlotte, NC
> > www.mariner-usa.com
> > (Please respond only to the newsgroups.)
> >
> > I support the Professional Association of SQL Server (PASS) and it's
> > community of SQL Server professionals.
> > www.sqlpass.org
> >
> > "Brian McGuigan" <Brian McGuigan@discussions.microsoft.com> wrote in
> message
> > news:9F7AB169-5441-4B27-8D15-C3D29C7E53FC@microsoft.com...
> > > We are creating and installing a custom application using an MDF file
> > under SQL Server 2000. We create our own MSDE Instance to deploy our
> > Aplication. We wish to protect both the data and the structure of this
> file
> > from a Database Adminisatrator who has another SQL Server installation on
> > the same machine. Is this possible and how do we go about it? Can we
> > assign Password Protection at the overall MDF File level?
> >
> >
>
>
>



Relevant Pages

  • Re: Password protect access DB?
    ... There are cracks even for SQL Server admin passwords. ... What is the purpose of your security ... ... protect your data from being manipulated without the interface or prevent ... directly in the database. ...
    (microsoft.public.dotnet.languages.vb)
  • Re: Restore points available
    ... Microsoft SQL Server MVP ... I support the Professional Association for SQL Server ... >> backup jobs so you can keep the size of the backup list down to a ... > Whoever had the brilliant idea of tacking DBA onto my job title should be ...
    (microsoft.public.sqlserver.server)
  • Re: How can I secure a MSDE database for users who have SQL Server?
    ... > How can I protect a MSDE-database so that SQL Server Enterprise ... > Manager always asks for a password if you want to access the database ... if you know the login name and password. ...
    (microsoft.public.sqlserver.msde)
  • Re: Protection Against Hackers
    ... receiving a threat from a hacker, I was no longer able to move files on my ... Is there a way for a VB.Net client to SQL Server 2005 to authenticate itself ... I need to protect my Windows Vista Ultimate server & SQL Server 2005 from ... newsgroups or other resources free or NOT free that I investigate to protect ...
    (microsoft.public.security)
  • Re: Password protect access DB?
    ... those that are determined to hack you database... ... you are trying to protect sensitive data ... There are cracks even for SQL Server admin passwords. ... Access or implement field level encryption for the sensitive data (ie ...
    (microsoft.public.dotnet.languages.vb)

Loading