Hiding/Encrypting Stored Procedures

Posted in 2009

Topics: Stored Procedures & SPL, Server Administration, Security, Permissions & Auditing

PRASUN GUPTA — Thu, 12 Feb 2009 15:43:01 — source: IIUG Forums & Mailing Lists

All, I wanted to know if there was a way to hide the stored procedures logic from DBA or any other user. I have not been able to find any information about this. In sqlserver one can use encryption, in oracle one can use a binary wrapper. Is there any way, I could create stored procedures whose logic is hidden. Thanking in advance for any pointers or help in this regard. Thanks Prasun

↪ replying to PRASUN GUPTA

Art Kagel — Thu, 12 Feb 2009 15:57:49 — source: IIUG Forums & Mailing Lists

Only be writing then in "C" - assuming you are using IDS 9.xx or later. Art On Thu, Feb 12, 2009 at 10:43 AM, PRASUN GUPTA <prasun.gupta@csfi.com>wrote: > All, > I wanted to know if there was a way to hide the stored procedures logic > from > DBA or any other user. I have not been able to find any information about > this. > > In sqlserver one can use encryption, in oracle one can use a binary > wrapper. > > Is there any way, I could create stored procedures whose logic is hidden. > > Thanking in advance for any pointers or help in this regard. > > Thanks > Prasun > > > > ******************************************************************************* > Forum Note: Use "Reply" to post a response in the discussion forum. > > -- Art S. Kagel Oninit (www.oninit.com) IIUG Board of Directors (art@iiug.org) Disclaimer: Please keep in mind that my own opinions are my own opinions and do not reflect on my employer, Oninit, the IIUG, nor any other organization with which I am associated either explicitly or implicitly. Neither do those opinions reflect those of other individuals affiliated with any entity with which I am affiliated nor those of the entities themselves. --0014853c0d682b62cf0462bac8f4

↪ replying to PRASUN GUPTA

Richard Snoke — Thu, 12 Feb 2009 16:33:42 — source: IIUG Forums & Mailing Lists

For IDS the only thing available right now is to produce a shared object (shared library) that has the procedures in compiled form. That way you never have to let the source code out in any (even encrypted) form. This does mean you must write the procedures in C using the datablade API rather than the Stored Procedure Language (SPL). There has been talk of procedure obfuscation as a feature, but that's not come to anything, at least not yet. Dick Snoke IBM Data Management - ChannelWorks dsnoke@us.ibm.com (404) 487-1595 From: "PRASUN GUPTA" <prasun.gupta@csfi.com> To: ids@iiug.org Date: 02/12/2009 10:44 AM Subject: Hiding/Encrypting Stored Procedures [14864] Sent by: ids-bounces@iiug.org All, I wanted to know if there was a way to hide the stored procedures logic from DBA or any other user. I have not been able to find any information about this. In sqlserver one can use encryption, in oracle one can use a binary wrapper. Is there any way, I could create stored procedures whose logic is hidden. Thanking in advance for any pointers or help in this regard. Thanks Prasun ******************************************************************************* Forum Note: Use "Reply" to post a response in the discussion forum.