Blog de Matias Katz Hablamos un poco de seguridad?

Encryption over Microsoft SQL Server

When managing an application security methodology, there are several ways of approaching it. Each method covers different portions of the data access flow, creating the so called "layered defense".

I leave you in this ocation with a document from Microsoft that addresses the management of encrypted database inputs, through native functionalities in its DB engine, MS SQL Server.

This way, an extra protection layer can be easily added, estabilshing an application security strategy in these layers:

1. Encryption when generatin the information
2. Encryption when exchanging information
3. Encryption when storing information

A more graphic way to explain it can ve seen in the image provided by Microsoft in their article:

Link to the article (english): http://www.microsoft.com/technet/prodtechnol/sql/2005/sqlencryption.mspx

Link to the document (english): http://download.microsoft.com/download/8/b/2/8b22991f-3f2f-4cea-b2ba-55c190841145/TDEandEFSBitLocker.docx