Database Security - Revisited

I've seen several Security related posts here recently and since I administer (DBA) a secure database I thought I would offer the following: 1. For the most part Security is based on trust (oversimplification). 2. The Rainbow Series from NCSC is important reference material (especially the Orange Book - Trusted Computer System Evaluation Criteria). 3. The Rainbow Series is difficult and dry reading for most. A good introduction would be "Computer Security Basics" from O'Reilly Publishing (www.ora.com). 4. Using Secure Unix and a Secure Database (such as Online Secure) is not a shortcut or an easy fix to anything. Although it does offer some very valuable solutions to security concerns. I would like to emphasize that this is more or less the 'official' security outlook following the recommendations from the National Computer Security Center. I relize that there are other lower level security concerns that affect us everyday. I bring all of this up only because I've seen several referances to Online Secure (which I think is a good product), but it is not a solution that could be implemented overnight. This message is not intended to correct anyone, only offer some additional information to those who may want to get real serious with security. I hope I have contributed something that someone may find useful. Doug --------------------------------------------- Doug White whiteda@Diamond.safb.af.mil Database Manager Online Secure 5.0