vb.net - storing highly sensitive data in sql server

Question

I've been looking for finding the best solution to store highly sensitive information like an Amount or a balance in a banking application. Can I store that just as a numeric field or Do I need any encryption to encrypt that data? Am a bit worried about encryptions since these fields are frequently being accessed by the users. So when ever it gets accessed there needs to be some decryption mecahnism and to store back the new balance amount that again needs some encryption. Or is there is a better solution for that.

Database is SQL Server 2008 R2 and the platform is .NET 4.0

Answer 1

这是一个值得思考的重要话题，有很多方法可以做到这一点。

但是，当我们拥有机密数据并从黑客那里保存东西时，以最好的方式进行加密，您当然应该对其进行加密。

看看这个 http://msdn.microsoft.com/en-us/library/ms179331.aspx

和这个

http://msdn.microsoft.com/en-us/library/ms174361.aspx

Answer 2

You should not need to store the data in an encrypted manner.

When it comes to security of data you should always work on preventing access via firewalls and correct login protocols.
Also only allows users to access data for which they have clearance.

When it comes to encryption - you could encrypt the disk but encrypting columns is not really worth the access time it will take in decrypting the data and if someone has access to the database invariably they will have access to the decryption routines.