I'm developing a desktop app for use internal to my company. The app's installation file is located on our company server and therefore is only accessible to authenticated employees (under the assumption our network is secure). If I were to connect to a remote database (such as AWS), would that pose a risk to exposing information?

  • That depends on your threat model. What kind of information are you worried about exposing? – MechMK1 Sep 11 at 14:01
  • Specifically the information stored in the database. – Chris Sep 11 at 14:06
  • This is really hard to answer cause it depends. It depends on the network connection to the DB, where and how the DB is stored, and the authentication on the DB. You also should ask yourself, is it possible for a user to copy the installation files outside of the corp. network? All these things play into the amount of risk you're exposing the company to. – SamuelWarren Sep 12 at 0:01
  • It is possible that a user could steal the installation files but that would be an insider threat and violation of company policy which for my situation would be a whole different issue. To clarify some of the other details, the database connection would be through Oracle client software which I believe uses TCP. The database would be reside on a reputable third party server (like AWS) and user authentication would be performed prior to connection to the remote database. – Chris Sep 12 at 18:07

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.