> Claudio, the main problem here is in data transmission inside a
> company. Having been working on security aspects of a project
> for quite some time (you do get to be paranoid) I know the
> kind of damage clear text data transfer over the net can cause.

This does not negate what Claudio said about using third party
packages for network encryption - this is still the best means of
achieving this type of security. Encrypt all your traffic, not just
the database, or you will end up with your hacker seeing - for
example - an email to/from support personnel revealing other means of
access and disruption.

> Are you aware that over 80% of attacks or theft of data
> start inside the company?

The interesting thing will be whether this statistic remains static
over the next few years. Within a few days of establishing my cable
connection and my ip address was getting pounded by interesting probes
from the internet.


Geoff Worboys
Telesis Computing