Subject Re: How to prevent SYSDBA to connect to database
Author Svein Erling
> Set, what about queries within SP/triggers? Serious talk about
> encryption can be started only after opportunities to attach to FB
> encryption plugins will be introduced, which is sheduled to FB2.
> We have excellent engine but still have no nice "commercial"
> wrapper. This is related not to security only - isql, gbak, gfix...

Nice to hear that this is scheduled for Fb2 (even though I don't need
it). The idea of encrypting data before storing (Fb < 2) has lots of
potential pitfalls, but as an alternative to denying SYSDBA access, it
may in some cases be the least problematic solution of the two.

Set