|
|
Registered User
Currently Offline
|
Posts: 21
Join Date: Oct 2009
|
Hello
1. Limit the number of users authorized to access the database. This would seem obvious to most but it is often overlooked.
2. To that end, prevent physical access to the machine by unauthorized people. It is virtually impossible to maintain security if there is unlimited physical access to a machine.
3. Most hackers are not Einsteins. They are looking for the lowest hanging fruit. Leaving databases or backups unencrypted is inviting anyone in.
4. When given the choice, choose pass phrases to encrypt data rather than passwords. Pass phrases are expressions or combination of words that are easy for you to remember but difficult for other people to guess. Preferably things in your everyday life should jog your memory. For example, if you pass four traffic lights on the way to work, your pass phrase could be pass4lights.
5. Keep keys separated from data. At a minimum, keys should be stored in a different file but preferably on a different drive, server, or device (e.g., USB jump drive).
__________________
|
