Transparent Data Encryption (TDE) in SQL Server

Introduction

Encryption brings data into a state that cannot be interpreted by anyone who does not have access to the decryption key, password, or certificates. Though encryption does not restrict the access to the data, it ensures that if data loss happens, then in that case data is useless to the person who does not have access to the decryption key/password/certificates. Though when you use encryption, there should be a maintenance strategy for passwords, keys, and certificates.

To meet the demands of regulatory compliance and corporate data security standards, SQL Server allows you to enable encryption at column/cell level or on the database level. You can even use file level encryption provided by Windows for database files.

Though there are several ways/levels to implement encryption in SQL Server, I am going to focus on Transparent Data Encryption (TDE) in this article, which was introduced in SQL Server 2008 and available in later releases.

Transparent Data Encryption (TDE) is a feature introduced in SQL Server 2008 and available in later versions for bulk encryption at the database file level (data file, log file and backup file) i.e. the entire database at rest. Once enabled for a database, this feature encrypts data into pages before it is written to the disk and decrypts when read from the disk. The best part of this feature is, as its name implies, its completely transparent to your application. This means literally no application code changes (only administrative change to enable it for a database) are required and hence no impact on the application codefunctionalities when enabling TDE on a database being referenced by that application.

If there is a requirement to meet the demands of regulatory compliance and overall concern for data privacy, as a DBA you just need to enable it at the database level and rest of things are taken care by SQL Server to ensure data files, log files and even that specific database backup files are encrypted to prevent unauthorized access to the data in the TDE enabled database.

When you enable or disable TDE, the encryption and decryption operations are scheduled on background threads (called the encryption scan or scan - that scans all database files for encryption when enabling or decryption when disabling TDE) by SQL Server. You can view the status of these operations using the catalog views and dynamic management views as demonstrated next.

Please note, as I said before TDE works on data at rest for the entire database; in other words, it encrypts data when writing to disk and decrypts it when reading from disk at I/O level through the buffer pool. This means, data in the buffer pool remains there in clear text format. Hence, if you want to protect data in the buffer pool with encryption, you need to employ a different technique.

These are the steps you need to perform to enable TDE for a database, assuming you have the required permissions for creating a database master key and certificates in the master database and CONTROL permissions on the user database.

See the original post here:
Transparent Data Encryption (TDE) in SQL Server

Winter School on Cryptography Symmetric Encryption in Theory and in Practice: Opening remarks – Video


Winter School on Cryptography Symmetric Encryption in Theory and in Practice: Opening remarks
The topic of the 4th Annual Bar-Ilan Winter School on Cryptography held in January 2014, was Symmetric Encryption in Theory and in Practice. The winter schoo...

By: barilanuniversity

Read more:
Winter School on Cryptography Symmetric Encryption in Theory and in Practice: Opening remarks - Video

Book Review: The Snowden Files

Journalist Luke Harding's latest is a fast-paced narrative of how the Snowden story was tracked and written, says Ruchi Kumar

Acclaimed journalist Luke Harding's The Snowden Files is more a remarkable piece of journalism than just an organisation's autobiographical account. Much like his earlier books, including Wikileaks: Inside Julian Assange's War on Secrecy, which borders a similar bailiwick, this one too is an attempt at documenting historical milestones in international journalism, more specifically those created by the UK-based news organisation The Guardian.

The book narrates real-life accounts of news publishers attempting to "break" the Snowden story, a story that eventually captured the attention of the whole world, and, if only for a moment, changed the way of international diplomacy. The true-to-life tale follows journalist Glenn Greenwald, Laura Poitras and a team of veteran The Guardian journalists as they pick up a lead on an epic story that could change the face of the international diplomatic order. They pursue Edward Snowden, across continents, as he helps them uncover the underhand attempts of some of the world's most powerful at controlling the ever growing influence of the Internet and technology. Their ordeal, dealing with the governments and organisations, is almost surreal, and sometimes you almost forget that you're reading a record of an event and not a sci-fi noir.It is a brilliant documentation of an ongoing story and continues to wield the power to make and break governments.

It must be noted that while writing Wikileaks in 2011, Harding frequently referred to Julian Assange's Cablegate as the single most important piece of journalism since the Pentagon papers in the 1970s. He now refers to the Snowden leak as the most important since the Assange story. That just goes to show how quickly technology got imbibed in contemporary journalism to produce more noteworthy content.

So, while three decades ago, a journalistic milestone such as this would have been considered a once-in-a-lifetime event, it now takes less than three years to repeat the feat. The book records the otherwise rare phenomenon in corporate journalism of how some of the world's largest media houses collaborated with each other, once again after the Wikileaks story, to bring out a story with global repercussions.

The book, as its name suggests, profiles the young information vigilante in every detail. At the same time, it has no illusions of heroic grandeur about a man who sacrificed his future to stand up for his beliefs.

The otherwise shy Snowden has been fleshed out for the readers to judge, not simply by his actions, but also his beliefs. He is a man with extreme libertarian views, ingrained patriotism (bordering nationalism), and a highly astute mind. Snowden's political views are set farther of the far right, and I cannot promise that after having read Harding's profile, you will continue to admire him. But it definitely helps give more context to the actions of a man who, unlike his predecessor, was anything but a tech hippie.

What stands out best in this narrative is the emphasis on the central idea of any democratic society mutual respect for dignity and privacy, both of which were blatantly violated by governments elected to protect these very values. It reveals how the doings of a group of people can extend beyond national leaders, government officials and diplomats, and go as far as to throw every citizen living in contemporary western democracy into the fray of international politics.

The story is told in a crisp, precise yet detailed narrative. The book is a fast read if you enjoy real life political drama and have been following the Snowden story in the news. And even if you haven't, the writer is generous with providing history and context to a remarkable tale.

See the original post here:
Book Review: The Snowden Files

Bradley E. Manning – The New York Times – NYTimes.com

Aug. 28, 2013

Editorial criticizes military's response to declaration by Chelsea Manning, formerly known as Pfc Bradley Manning, that she wants to live as a woman; urges military to give Manning appropriate medical care and safe but not unduly isolated housing, which should be available for all transgender prisoners. MORE

Pfc Bradley Manning, who was sentenced to 35 years in prison for leaking vast archives of government files to WikiLeaks, says that he is female and asks to receive hormone therapy while in prison, setting up a potential conflict over a treatment the Army says it does not provide to its inmates. MORE

News organizations are divided in their handling of request that they now refer to Pfc Bradley Manning as a woman. MORE

"Pfc Bradley Manning is sentenced to 35 years in prison for providing more than 700,000 government files to WikiLeaks;" sentence is longest ever handed down in case involving leak of United States government information for purpose of having information reported to public; leak lifted veil on American and military diplomatic activities worldwide; Manning will be eligible for parole in about seven years. MORE

Editorial contends Pfc Bradley Manning's 35-year sentence is too severe, given his stated desire not to betray his country but to shed light on realities of American war effort; notes prosecutors are attempting to discourage other leakers with sentence, but holds even threat of a severe prison sentence will not deter those who believe the government is too secretive. MORE

Pfc Bradley Manning is posed to be sentenced for providing more than 700,000 secret government documents to WikiLeaks, largest leak of confidential materials in American history; faces up to 90 years in prison. MORE

Defense lawyers for Pfc Bradley Manning make plea for leniency at sentencing hearing, asking military judge Col Denise R Lind to allow him a chance to rehabilitate himself; Manning faces up to 90 years in prison for his role in disclosing government documents to WikiLeaks. MORE

Pfc Bradley Manning, who is facing up to 90 years in prison for leaking 700,000 government files to WikiLeaks, apologizes at his court-martial trial, saying he now realizes that what he did was wrong. MORE

Former supervisor of Pfc Bradley Manning testifies at his court-martial trial that Army intelligence unit in Iraq allowed Manning to keep working with classified information despite recurring concerns about his mental health because unit was understaffed and he was playing vital role in analyzing insurgent threats. MORE

See the original post here:
Bradley E. Manning - The New York Times - NYTimes.com

Fantastic Beasts and Where to Find Them 2016, Sony’s Edward Snowden Movie – Beyond The Trailer – Video


Fantastic Beasts and Where to Find Them 2016, Sony #39;s Edward Snowden Movie - Beyond The Trailer
Superman vs Batman has company in 2016 with Fantastic Beasts and Where to Find Them, the Harry Potter spin-off! Plus Sony preps an Edward Snowden movie! http...

By: Beyond The Trailer

Originally posted here:
Fantastic Beasts and Where to Find Them 2016, Sony's Edward Snowden Movie - Beyond The Trailer - Video

Edward Snowden risked UK agents’ lives – and could have spied for Russia while in the U.S.

Snowden stole hundreds of thousands of documents exposing NSA spying Congress heard in March that documents contained US military secrets He fled to Russia where officials say he's paying for board with information Senator claims Putin is 'exploiting' Snowden until he 'reaches max on that' Also claimed Snowden may have been feeding Russians and Chinese information all along without knowing it

By Ian Drury

Published: 06:36 EST, 16 May 2014 | Updated: 21:46 EST, 16 May 2014

191 shares

76

View comments

Turned? Western security officials believe Snowden has become a Russian informant out of fear

Edward Snowden put British agents lives at risk, it was claimed yesterday, as it was alleged he spied for Russia while in the U.S.

Intelligence chiefs believe the whistleblower is passing secrets to Vladimir Putin in return for sanctuary.

Snowden, 30, became one of the worlds most wanted men last June when he broke cover as the civilian CIA worker who stole classified documents from the US National Security Agency.

Original post:
Edward Snowden risked UK agents' lives - and could have spied for Russia while in the U.S.

Fox Guest Says Obama Doesn’t Take Security Threats Sesriously – Video


Fox Guest Says Obama Doesn #39;t Take Security Threats Sesriously
http://www.newshounds.us - All that drone stuff and NSA spying is just for show, eh? More discussion and comments welcome at http://www.newshounds.us/fox_s_peters_the_obama_administration_doesn_t_take_any...

By: cheldemedo

Original post:
Fox Guest Says Obama Doesn't Take Security Threats Sesriously - Video