Hot answers tagged

2 votes
Accepted

How can an attacker cryptolock a database content after having compromised the application server, which protection to setup?

But can he encrypt / cryptolock the database content? Depends on the permission scope your application server has. If your application can update entries, then the attacker could simply update the ...
  • 516
2 votes

How can an attacker cryptolock a database content after having compromised the application server, which protection to setup?

If an attacker can access the DB then yes they could potentially 'crypto lock' it. As you mentioned, the easiest way to do this is to read the data then update it. This is technically not hard to do ...

Only top scored, non community-wiki answers of a minimum length are eligible