Real Software Forums

The forum for Real Studio and other Real Software products.
[ REAL Software Website | Board Index ]
It is currently Sun Sep 15, 2019 9:35 am
xojo

All times are UTC - 5 hours




Post new topic Reply to topic  [ 8 posts ] 
Author Message
 Post subject: Database protection options.Need help
PostPosted: Mon Dec 17, 2012 10:18 am 
Offline

Joined: Sat Feb 04, 2012 1:26 pm
Posts: 86
Location: Italy
Hi,
I am trying to understand better about db protection. As i feel a little bit confused i need some help.

1) I wonder if the are some dbms safer than others?
2) As for the protection of the data, I saw there is the db.encrypt and db.encryptionkey. If I decrypt the database as the program is launched and encrypt it again before the programs close, will the data be readable from outside during the time the program has not been closed yet?
3) I also tought about writing the records after having some way encrypted the plain text, so that someone opens the db file, records are not easy readable. Does it offer a good protection?
4) is hashing another way to protect databases?
5) password protected file and encrypted file is the same thing? I refer to the possibility the user has with ms access to protect the mdb file with a password from inside the ms access itself.

Thanks for any help.


Top
 Profile  
Reply with quote  
 Post subject: Re: Database protection options.Need help
PostPosted: Mon Dec 17, 2012 11:04 am 
Offline
User avatar

Joined: Sun Aug 05, 2007 10:46 am
Posts: 4931
Location: San Diego, CA
1) yes..... commerical ones will usually be "safer" than "free" ones.
2) normally in this situation, the database is encrypted the entire time... and the app encrypts/decrypts the data on each read/write
3) not a good idea.... go with #2
4) "hashing" is one method used by #2
5) depends..

is this a local database? LAN based? or remote? are you looking to protect it from "prying eyes"... or possible "data thiefs"

_________________
Dave Sisemore
iMac I7[2012], OSX Mountain Lion 10.8.3 RB2012r2.1
Note : I am not interested in any solutions that involve custom Plug-ins of any kind


Top
 Profile  
Reply with quote  
 Post subject: Re: Database protection options.Need help
PostPosted: Mon Dec 17, 2012 11:55 am 
Offline

Joined: Sat Feb 04, 2012 1:26 pm
Posts: 86
Location: Italy
Hi Dave,
the DB will be located just on a PC. Maybe in the future might be on a shared hd.
In the case of a shared access, main concern might be more about prying eyes than data theft, as they are not that valuable data.
Anyway, as you mention different ways of DB accessing by local, remote, or Lan, which are the differences the db should have in those cases ?


Top
 Profile  
Reply with quote  
 Post subject: Re: Database protection options.Need help
PostPosted: Mon Dec 17, 2012 12:10 pm 
Offline

Joined: Fri Jan 06, 2006 3:21 pm
Posts: 12388
Location: Portland, OR USA
Encrypt/Decrypt/EncryptionKey apply to REALSQLdatabase only. You Encrypt the database upon creation and thereafter you supply the EncryptionKey when you open it. The database remains encrypted on disk and the information is encrypted/decrypted as you read and write to it. You use Decrypt when you change your mind and want to un-encrypt the database.

Hash <> Encryption. Hashing is one-way; it cannot be reversed. Some information, such as passwords, should be stored as a hash.

For a database stored locally, you can use REALSQLdatabase. Otherwise, use a database server. Some database servers allow a secure connection. Otherwise, the data is sent across the network in plain text. But that is just fine if your concern is casual "prying eyes".


Top
 Profile  
Reply with quote  
 Post subject: Re: Database protection options.Need help
PostPosted: Mon Dec 17, 2012 4:59 pm 
Offline

Joined: Sat Feb 04, 2012 1:26 pm
Posts: 86
Location: Italy
Thanks for the help, Dave, Tim.
I am learning more and more with your help.
Returning to the topic, once I have encrypted a db, it should not be possible to open that file with a db management software. Isn't it?


Top
 Profile  
Reply with quote  
 Post subject: Re: Database protection options.Need help
PostPosted: Mon Dec 17, 2012 5:15 pm 
Offline

Joined: Fri Jan 06, 2006 3:21 pm
Posts: 12388
Location: Portland, OR USA
Quote:
once I have encrypted a db, it should not be possible to open that file with a db management software. Isn't it?

Not without supplying the encryption key.


Top
 Profile  
Reply with quote  
 Post subject: Re: Database protection options.Need help
PostPosted: Tue Dec 18, 2012 4:50 am 
Offline

Joined: Sat Feb 04, 2012 1:26 pm
Posts: 86
Location: Italy
thanks again for helping.
...and now, it's time for me, to do some trial on the field.
ciao,
Antonio


Top
 Profile  
Reply with quote  
 Post subject: Re: Database protection options.Need help
PostPosted: Wed Dec 19, 2012 1:15 pm 
Offline

Joined: Wed Sep 17, 2008 2:45 pm
Posts: 220
DaveS wrote:
1) yes..... commerical ones will usually be "safer" than "free" ones.


Most major DB servers are open source and free, so I have no idea why this statement would be true?

And, do not consider yourself more protected after using encryption or something else. Most databases are 'hacked' through a frontend communicating with that database. (Mostly in a very bad way). Database server applications are hardly ever hacked.

_________________
My native language is not English.


Top
 Profile  
Reply with quote  
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 8 posts ] 

All times are UTC - 5 hours


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum

Search for:
Jump to:  
cron
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group