加密数据库
我在公共领域的数据库中拥有非常敏感的数据。虽然我已经保护它以防止 SQL 注入，但我还是有点担心数据。我可以使用任何高级加密算法来加密整个数据库吗？这是保护数据的正确方法吗？有什么建议吗？
数据库：MySql
I have very sensitive data of mine in the database available in the public domain. Though I have secured it to prevent sql injections, I little bit worried about the data. Can I able to encrypt the entire database using any advance encryption algorithms. Is that a correct way of securing the data? Any suggestions?
Database: MySql
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（2）
我不确定公共领域的数据库（这具有一些非常具体的法律含义）如何包含敏感数据。
您可能会做的是加密数据库的某些列，即在客户端应用程序中每行的某些列上进行加密和解密。
I'm not sure to understand how a database in the public domain (this has some very specific legal meaning) can contain sensitive data.
What you might perhaps do is encrypt some columns of your database, that is have the encryption and decryption happening in your client application, on some columns of each rows.
首先，仅仅数据加密并不是答案。
您应该了解并控制“谁可以访问和访问数据”。
尽管您对数据本身进行了加密，但攻击者仍然可以获取加密后的数据。
为了防止这种情况发生，您应该控制访问权限或权限。
另外，您应该知道谁访问了加密数据。因为如今，数据不仅可能被外部用户窃取，也可能被内部用户窃取。
您应该加密数据、控制权限并审核访问者。
在那些日子里，这三（3）种技术已经以各自的方式发展起来。
大多数公司都购买了每种解决方案。
但对于个人用户来说，很难购买并自行构建这些环境。
我想回顾一下提供这三（3）个功能的MyDiamo。
First of all, only data encryption is not the answer.
You should know and control "Who can access and accessed data".
Although you encrypt data itself, attacker can get the encrypted data.
To prevent it, you should control the access privilege or authority.
Also, you should know who accessed encrypted data. Because in these days, data can be stolen by not only external users, but also internal users.
You should encrypt data, control privilege and audit who accessed.
In those days, those three(3) technology have been developed in each way.
Most companies have bought each solutions.
But for personal user, it is hard to buy it and build those environment itself.
I would you like to review MyDiamo that provides those three(3) functions.