• Microsoft Windows
  • IIS Web server

Let's say an application gets compromised with an RCE, what's the best scenario of protecting the database connection string file or any other sensitive configuration files.

  • DPAPI is not an answer here, because you would be running under the same context as the application.
  • HSM is a hard-core solution and also would somehow need to be accessed by the user running the application, meaning it can be compromised

What other options are there?

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.