• 
  
  Understanding your legal obligations to protect data
• 
  
  Constructing a realistic database security threat model and ensuring that you address critical threats
• 
  
  Designing robust database cryptographic infrastructure around today's most effective security patterns
• 
  
  Hardening your database security requirements
• 
  
  Classifying the sensitivity of your data
• 
  
  Writing database applications that interact securely with your cryptosystem
• 
  
  Avoiding the common vulnerabilities that compromise database applications
• 
  
  Managing cryptographic projects in your enterprise database environment
• 
  
  Testing, deploying, defending, and decommissioning secure database applications

© Copyright Pearson Education. All rights reserved.

About The Author

Kevin Kenan leads Symantec's IT application and database security program. In this position, he works with application development teams to ensure that the applications and databases Symantec deploys internally are secure. This work includes specifying cryptographic solutions to protect sensitive information wherever it is stored.

    Prior to his work in Symantec's information security department, Kevin designed and developed applications for Symantec's information technology and product development teams often with an emphasis on security and cryptography. He previously provided enterprise support for Symantec's development tools, and he holds a Bachelor of Science in Mathematics from the University of Oregon.

Customer Reviews & Comments
Iorn mountain, UPS both had very drastic failures this year, backup tapes with thousands of customer records were lost. Everybody in the industry is scrambling to figure out how to encrypt the backup tapes. Most of us feel the option of simply making a backup of already encrypted data is a better choice than piping the backup through an encryption process. This book arrives in our hour of need and it has the feel of a been there, done that author. The code examples are MySQL and Java 1.4.2 and really helped me understand just what needs to happen. The majority of the book is platform agnostic, so if you run a different platform it will still be valuable. The book is well written, well edited, well laid out, what you expect to see from Addison-Wesley and Symantec Press. The only thing that drove me crazy about the book is on page 163, the author recommends HSMs ( Hardware Security Model) for storing the keys to the kingdom, yup, yup, I agree, we all agree. And then he goes on to say, Java 1.4.2 does not support this -- ouch! However, his code examples are a nice work around using AES on the local engine which is good'nuff. Got sensitive data? Then get this book! Comment | Permalink | (Report this)