Q

Secure data against DBA

What is the best way to secure data against DBA?
I don't quite understand the question but I'm going to assume that you're asking how you can secure your data from your database administrator. This can happen in situations where the DBA might have super user access to the server, yet his/her position in the company SHOULD ONLY allow him/her limited access to the data (payroll data, for instance). This is a tough one to answer, since you want to make sure your DBA has a full access ("SA" account) login so that he/she can troubleshoot issues. Your best bet is to allow the DBA to have full access to the server but to use table or column-level encryption to hide sensitive columns. Use a product such as:

NetLib Encryptionizer for SQL Server

XP_CRYPT

DbEncrypt for Microsoft SQL Server

Or you can wait for SQL Server 2005 which will have column-level encryption built-in!


Do you have comments on this Ask the Expert Q&A? Let us know.
This was first published in June 2005

Dig deeper on SQL Server Security

Pro+

Features

Enjoy the benefits of Pro+ membership, learn more and join.

Have a question for an expert?

Please add a title for your question

Get answers from a TechTarget expert on whatever's puzzling you.

You will be able to add details on the next page.

0 comments

Oldest 

Forgot Password?

No problem! Submit your e-mail address below. We'll send you an email containing your password.

Your password has been sent to:

-ADS BY GOOGLE

SearchBusinessAnalytics

SearchDataCenter

SearchDataManagement

SearchAWS

SearchOracle

SearchContentManagement

SearchWindowsServer

Close