473,320 Members | 2,088 Online
Bytes | Software Development & Data Engineering Community
Post Job

Home Posts Topics Members FAQ

Join Bytes to post your question to a community of 473,320 software developers and data experts.

How To PROTECT SQL Server Database Files ?

Hello,
How to protect structures(Tables,SP,Views and Functions) of a SQL
Server Database?(Password protect a database file)
I have a SQL database that will distribute with my application, I want
to protects it's structure from my appliction users. Only my
application can access the database.

Thanks

Jul 23 '05 #1
3 13971
Hi

Can not be done. An Access DB password can be cracked in minutes.
Even if you could protect it, Profiler could trace what commands you send to
the DB.

Basic computer security principle: If someone has physical access to a
computer or a DB, they can get to the data on the PC or database.

Most good DBA's will come up with similar DB structures if they get asked to
create a DB to solve a problem. A DB structure can not be so "earth moving"
that it needs protection.

If a vendor supplies a product with a DB that is protected, for a good
laugh, I will want to look at it as they probably have bad design and worse
code to hide.

Regards
--------------------------------
Mike Epprecht, Microsoft SQL Server MVP
Zurich, Switzerland

IM: mi**@epprecht.net

MVP Program: http://www.microsoft.com/mvp

Blog: http://www.msmvps.com/epprecht/

"Parham" <pa***************@gmail.com> wrote in message
news:11*********************@g14g2000cwa.googlegro ups.com...
Hello,
How to protect structures(Tables,SP,Views and Functions) of a SQL
Server Database?(Password protect a database file)
I have a SQL database that will distribute with my application, I want
to protects it's structure from my appliction users. Only my
application can access the database.

Thanks

Jul 23 '05 #2
When you distribute your application, assume it will be an open book to
the end user. For both you and your users the best way to protect your
intelectual property is with a licence agreement, not with software
based security.

--
David Portas
SQL Server MVP
--

Jul 23 '05 #3
Parham (pa***************@gmail.com) writes:
How to protect structures(Tables,SP,Views and Functions) of a SQL
Server Database?(Password protect a database file)
I have a SQL database that will distribute with my application, I want
to protects it's structure from my appliction users. Only my
application can access the database.


You can use WITH ENCRYPTION on stored procedures, views and functions
when you create your objects. However, decryption methods can easily
be found on the web, so it gives no real protection. The main point
with encrypting objects is to inform people that they are supposed
to keep their nose out, so they don't wander just by chance into
your code. Someone who is dead set to find out what your code is like,
will be able to crack it.

And note that there might be one more reason to break into the code, not
only to steal intellectual property. The users might experience severe
performance problems, and need to tune your code, and you might have
gone for a two-month roundtrip in Argentina. In this case, the users
may be less happy with you if you have encrypted the procedures.

Anyway, as other have pointed out, encryption or not, a real license
agreement is a must.

And, oh, table definitions you cannot encrypt.
--
Erland Sommarskog, SQL Server MVP, es****@sommarskog.se

Books Online for SQL Server SP3 at
http://www.microsoft.com/sql/techinf...2000/books.asp
Jul 23 '05 #4

This thread has been closed and replies have been disabled. Please start a new discussion.

Similar topics

5
by: Brian Madden | last post by:
Hello All, I have what I thought would be a simple problem although I've been searching for a few hours with no luck. I have several PDF and MPG files I would like to provide to users to...
11
by: siliconmike | last post by:
Is there a way to protect data files from access by root ? I have a data-centered website and would like to protect data piracy from any foot-loose hosting company employee. Any ideas? ...
29
by: Frank Millman | last post by:
Hi all I am writing a multi-user accounting/business system. Data is stored in a database (PostgreSQL on Linux, SQL Server on Windows). I have written a Python program to run on the client,...
4
by: Ray Stevens | last post by:
How do you protect files (such as .PDF) in a hosted (Interland) environment when you have no access to IIS?
2
by: itamtodd | last post by:
How Do I License & Protect My Software? I am in the process of developing a small program that I will be trying to sell to different institutions. The program is written in VB and uses an...
3
by: Miro | last post by:
Why Password protect an MDB when someone can google and get a hack? Wondering if anyone else has thought of this and just said "oh well"... I plan to password protect an MDB where I have some...
22
by: teejayem | last post by:
Hi, I am new to programming with databases and was wanting some help. Is there any way to password protect an access database and access sent sql commands to it via vb.net code? Any help...
0
by: Tea Maker | last post by:
Hi, I installed MSDE on my client's computer and restored the database there. The application is working very well. but the problem is, you can find the MDF and LDF files in the "Data" folder found...
3
by: ManWithNoName | last post by:
Hi guys. I’m still occupied with school, however, I can’t quite help thinking about a part of my project that I’m very curious about. I want to protect files and folders on the web server, so...
0
by: DolphinDB | last post by:
The formulas of 101 quantitative trading alphas used by WorldQuant were presented in the paper 101 Formulaic Alphas. However, some formulas are complex, leading to challenges in calculation. Take...
0
isladogs
by: isladogs | last post by:
The next Access Europe meeting will be on Wednesday 6 Mar 2024 starting at 18:00 UK time (6PM UTC) and finishing at about 19:15 (7.15PM). In this month's session, we are pleased to welcome back...
0
by: Vimpel783 | last post by:
Hello! Guys, I found this code on the Internet, but I need to modify it a little. It works well, the problem is this: Data is sent from only one cell, in this case B5, but it is necessary that data...
0
by: jfyes | last post by:
As a hardware engineer, after seeing that CEIWEI recently released a new tool for Modbus RTU Over TCP/UDP filtering and monitoring, I actively went to its official website to take a look. It turned...
0
by: ArrayDB | last post by:
The error message I've encountered is; ERROR:root:Error generating model response: exception: access violation writing 0x0000000000005140, which seems to be indicative of an access violation...
1
by: PapaRatzi | last post by:
Hello, I am teaching myself MS Access forms design and Visual Basic. I've created a table to capture a list of Top 30 singles and forms to capture new entries. The final step is a form (unbound)...
0
by: Defcon1945 | last post by:
I'm trying to learn Python using Pycharm but import shutil doesn't work
0
by: af34tf | last post by:
Hi Guys, I have a domain whose name is BytesLimited.com, and I want to sell it. Does anyone know about platforms that allow me to list my domain in auction for free. Thank you
0
by: Faith0G | last post by:
I am starting a new it consulting business and it's been a while since I setup a new website. Is wordpress still the best web based software for hosting a 5 page website? The webpages will be...

By using Bytes.com and it's services, you agree to our Privacy Policy and Terms of Use.

To disable or enable advertisements and analytics tracking please visit the manage ads & tracking page.