TDE helps protect data stored on media in the event that the storage media or data file is stolen.
Encrypted data is transparently decrypted for a database user or application that has access to data. Transparent Data Encryption (TDE) enables you to encrypt sensitive data, such as credit card numbers, stored in tables and tablespaces. This prevents anyone without the keys from using the data, but this kind of protection must be planned in advance. One solution is to encrypt the sensitive data in the database and protect the keys used to encrypt the data with a certificate. However, in a scenario where the physical media (such as drives or backup tapes) are stolen, a malicious party can restore or attach the database and browse the data. You can take several precautions to help secure the database, such as designing a secure system, encrypting confidential assets, and building a firewall around the database servers.
0 kommentar(er)
