Cryptography in the Database Sample Code

Cryptography in the Database is a book about protecting your sensitive data where it is most vulnerable: sitting at rest in the database. Several goodies from the book are available for your perusal:

• Chapter two on line or as a PDF
• The index (PDF)
• Source code from the book
• Addison-Wesley's page contains more information including the book's preface

From the back of the book:

Protect Your Enterprise Data with Rock-Solid Database Encryption

If hackers compromise your critical information, the results can be catastrophic. You're under unprecedented pressure—from your customers, your partners, your stockholders, and now, the government—to keep your data secure. But what if hackers evade your sophisticated security mechanisms? When all else fails, you have one last powerful line of defense: database cryptography. In this book, a leading crypto expert at Symantec demonstrates exactly how to use encryption with your own enterprise databases and applications.

Kevin Kenan presents a start-to-finish blueprint and execution plan for designing and building—or selecting and integrating—a complete database cryptosystem. Kenan systematically shows how to eliminate weaknesses, overcome pitfalls, and defend against attacks that can compromise data even if it's been protected by strong encryption.

This book's 3,000 lines of downloadable code examples let you explore every component of a live database cryptosystem, including key vaults and managers, manifests, engines, and providers.

This book's coverage includes

• Understanding your legal obligations to protect data

• Constructing a realistic database security threat model and ensuring that you address critical threats

• Designing robust database cryptographic infrastructure around today's most effective security patterns

• Hardening your database security requirements

• Classifying the sensitivity of your data

• Writing database applications that interact securely with your cryptosystem

• Avoiding the common vulnerabilities that compromise database applications

• Managing cryptographic projects in your enterprise database environment

• Testing, deploying, defending, and decommissioning secure database applications
  

Cryptography in the Database is an indispensable resource for every professional who must protect enterprise data: database architects, administrators, and developers; system and security analysts; and many others.

You can find Cryptography in the Database at Amazon or at your local book store.

Comments

[zhulin]

I like the book very much!
The book tell me what is Cryptography ,and how to use encryption with our own enterprise databases and applications.
This semester the theme of my paper is encrypting databases,the book gives me a great help .I greatly appreciate Mr.Kevin Kenan and his book.

[Patrick Donelan]

Hi Kevin,

I'm currently two thirds of the way through your book and finding it very insightful.

For smaller projects that are forced to use local key stores as opposed to an HSM, do you know of any language-neutral solutions that exist (eg. third-party programs that can be interfaced from one's programming language of choice)?

In many cases it seems better to use a well established program that has been hardened by multiple users (within the inherent limits of a local store) rather than attempting to roll your own solution, especially for smaller projects.

Regards,

Patrick Donelan

[Kevin Kenan]

Hi Patrick,

I don't know of any software-based, language-neutral key management solutions, but I agree with you that using a tried and tested one is better than rolling a custom solution. I'm just starting work on an open source database encryption system that I think would meet your needs. I'll follow up with you via email.

Thanks,
-kk

[Craig McLaughlin]

Great book! I've devoured it. Only one question / comment: Java not being my favorite language... has there been progress by anyone you know of to port to other languages? Or should I get started?

Thanks,
--Craig