Security related aspects of databases and database access.
1
vote
1answer
360 views
Storing US employer identification number (EIN / FEIN) in a database
What are considerations for storing a United States Employer Identification Number (EIN / FEIN) in a database?
Is this considered sensitive information along the lines of an SSN?
Are there legal ...
1
vote
1answer
91 views
Isolating database? Is it possible?
I have been assigned CTF project for IT Security for my final year project in school.
We are planning to have a flag that are base on SQL injection but for the user to overcome the challenge, they ...
1
vote
1answer
164 views
Authentication for a batch script
It seems amazing that there is no industry accepted best practice for this problem yet (or maybe just one I'm not aware of):
What is the most secure way for a batch script, a program needing to ...
1
vote
1answer
175 views
users avatar names based on Primary Key, is it safe?
We upload users avatar with their primary key name. avatars name are 1.jpg,2.jpg,3.jpg,... according to their primary key.
We implemented this to omit avatar field from database, instead with use ...
1
vote
0answers
66 views
What becomes of SIEM when a large database like teradata gets involved? [closed]
My topic sentence says it all.
I want to know the effect on performance, storage and analysis capabilities when teradata database is added. I'm talking about 70TB of storage with internal ...
1
vote
0answers
304 views
A proposal for Data Transmission and Password Encryption [closed]
I need to implement a sensitive data protection scheme which can meet the requirements on secure data transmission, protection and storage, assuming mutually trusted third party is not available, that ...
0
votes
2answers
122 views
Encrypting Fields in Database
I'm working on an ASP.NET web application that will have to store sensitive information. I would like to encrypt the sensitive fields to protect against any possible SQL injection vulnerabilities. ...
0
votes
1answer
167 views
Protect database resources from fake data inputs via web forms
Scenario:
I'm working on a project that needs to accept large amounts of data (customer data) from its users. So it can be normal to have a user trying to add 10,000 or 100,000 records at a time. In ...
0
votes
3answers
733 views
Database field type for password storage?
In the past I used varchar(255) for storing hashed passwords (no salt). Is this still enough? Or are longer fields required?
0
votes
1answer
91 views
SIEM technology is it database friendly? [closed]
I have a few questions regarding the use of Databases in SIEM technology. I would appreciate if you guys can help me understand / answer these questions. The answers from you help me design the SIEM ...
0
votes
1answer
325 views
DRY API Authentication Design Between Services
I am creating an API service that is going to require authentication. this will be the first part of a project that will include a front-end service for my website, and also open up the api for 3rd ...
0
votes
1answer
251 views
Enterprise Encryption Considerations
What are the different aspects to consider for Enterprise Encryption policy?
So far the resources I have are:
https://www.owasp.org/index.php/Cryptographic_Storage_Cheat_Sheet
...
0
votes
1answer
201 views
What should be Database encryption strategy ?
In MS SQL Server 2005/2008 standard encryption all data in the database is encrypted using the SMK/DMK scheme. In this scheme a key is issued for each client connecting to the database. What would a ...
0
votes
1answer
137 views
How Twitter got hacked and preventing [closed]
I have been seeing in the news recently that Twitter (including Wall Street Journal and New York Times) got hacked by a sophisticated hacker (group), but I would have assumed they would have ...
-1
votes
1answer
142 views
Theorical question on encryption methods [duplicate]
Possible Duplicate:
Encryption strategies for multi users access in production systems
I would like to develop a service on wich clients would connect and retrieve informations. These ...
-3
votes
3answers
100 views
How to effectively save database password inside desktop application?
Suppose we are in the field of desktop applications which need to store their data in a database. How do I store the password for this database avoiding the most obvious mistakes, which are:
1) hard ...
-3
votes
0answers
33 views
auto backup database and folders on host from Mac [closed]
I am being constantly attacked and would like a solution that would support me while I fix the code (couple of days). I have a domain on justhost and would like to have an application on my mac that ...
