Comments for Database as a Service http://dbaas.wordpress.com Discussions and viewpoints concerning Database-as-a-Service (DbaaS) Mon, 27 Apr 2009 13:18:22 +0000 http://wordpress.com/ hourly 1 Comment on What Exactly Is Database as a Service? by Oracle Cloud | Saasmania http://dbaas.wordpress.com/2008/05/14/what-exactly-is-database-as-a-service/#comment-37 Oracle Cloud | Saasmania Mon, 27 Apr 2009 13:18:22 +0000 http://dbaas.wordpress.com/?p=4#comment-37 [...] de Amazon y la BBDD Oracle. Y quizás si les va bien se atrevan a dar servicios paas o servicios de BBDD as a service. Veremos que terminan [...] [...] de Amazon y la BBDD Oracle. Y quizás si les va bien se atrevan a dar servicios paas o servicios de BBDD as a service. Veremos que terminan [...]

]]> Comment on What Exactly Is Database as a Service? by bluemountain78 http://dbaas.wordpress.com/2008/05/14/what-exactly-is-database-as-a-service/#comment-21 bluemountain78 Thu, 05 Feb 2009 16:55:54 +0000 http://dbaas.wordpress.com/?p=4#comment-21 Great Post . I look forward to seeing the comparison summaries between the different dbaas. Great Post . I look forward to seeing the comparison summaries between the different dbaas.

]]> Comment on Transparent Data Encryption: Experience from the Trenches by sbobrowski http://dbaas.wordpress.com/2009/01/17/transparent-data-encryption-experience-from-the-trenches/#comment-20 sbobrowski Thu, 22 Jan 2009 13:23:31 +0000 http://dbaas.wordpress.com/?p=25#comment-20 Chris, thanks for identifying an interesting issue regarding TDE configuration. As you point out, 11g has some additional options here that help. But with 10g, you shouldn't have a problem separating the wallet backups from the database backups. The wallet is typically stored in $ORACLE_BASE/admin and protected by file system backups, while the database is typically stored in other file systems that operating system backups avoid altogether because the database files are backed up by RMAN. And even if the wallet and database were to somehow end up on the same tape, someone would only be able to open the wallet with its password. We've never given a sysadmin-type a database wallet password. That said, if you configure auto-open wallet (so that the wallet automatically opens when the database instance starts), you are at risk should someone recover both the wallet and database -- but that's the risk you take for the convenience of not having to manually open the wallet. Chris, thanks for identifying an interesting issue regarding TDE configuration. As you point out, 11g has some additional options here that help. But with 10g, you shouldn’t have a problem separating the wallet backups from the database backups. The wallet is typically stored in $ORACLE_BASE/admin and protected by file system backups, while the database is typically stored in other file systems that operating system backups avoid altogether because the database files are backed up by RMAN. And even if the wallet and database were to somehow end up on the same tape, someone would only be able to open the wallet with its password. We’ve never given a sysadmin-type a database wallet password. That said, if you configure auto-open wallet (so that the wallet automatically opens when the database instance starts), you are at risk should someone recover both the wallet and database — but that’s the risk you take for the convenience of not having to manually open the wallet.

]]> Comment on Transparent Data Encryption: Experience from the Trenches by Chris http://dbaas.wordpress.com/2009/01/17/transparent-data-encryption-experience-from-the-trenches/#comment-19 Chris Mon, 19 Jan 2009 19:49:56 +0000 http://dbaas.wordpress.com/?p=25#comment-19 When you use TDE, the keys will typically be stored on the machine in the so-called Oracle e-Wallet. While Oracle has taken it as far as they can with a software solution (and they've done a brilliant job), storing keys in software isn't best security practice because you shouldn’t keep the key and the database in the same place. When you back up the machine, the key will be backed up with the database. Also, you will find it difficult to demonstrate a separation of duties between database security administration for compliance. Oracle 11g supports the use of hardware security modules (HSMs) that protect the keys, separate security and DB administration, and ensure that keys are never stored with the data. HSMs will also offer you to manage keys across database servers, reducing your total cost of ownership. I work for Thales e-Security (formerly nCipher), who offers such a solution. If you’re interested, please check out: <a href="http://www.ncipher.com/en/Solutions/Business%20Solutions/Databases.aspx" rel="nofollow">http://www.ncipher.com/en/Solutions/Business%20Solutions/Databases.aspx</a>. When you use TDE, the keys will typically be stored on the machine in the so-called Oracle e-Wallet. While Oracle has taken it as far as they can with a software solution (and they’ve done a brilliant job), storing keys in software isn’t best security practice because you shouldn’t keep the key and the database in the same place. When you back up the machine, the key will be backed up with the database. Also, you will find it difficult to demonstrate a separation of duties between database security administration for compliance.

Oracle 11g supports the use of hardware security modules (HSMs) that protect the keys, separate security and DB administration, and ensure that keys are never stored with the data. HSMs will also offer you to manage keys across database servers, reducing your total cost of ownership.
I work for Thales e-Security (formerly nCipher), who offers such a solution. If you’re interested, please check out: http://www.ncipher.com/en/Solutions/Business%20Solutions/Databases.aspx.

]]> Comment on Database as a Service (DbaaS) Product Directory by sbobrowski http://dbaas.wordpress.com/database-as-a-service-dbaas-product-directory/#comment-18 sbobrowski Thu, 08 Jan 2009 17:40:31 +0000 http://dbaas.wordpress.com/?page_id=5#comment-18 Thanks for the feedback. Thanks for the feedback.

]]> Comment on Database as a Service (DbaaS) Product Directory by Mike E http://dbaas.wordpress.com/database-as-a-service-dbaas-product-directory/#comment-17 Mike E Thu, 08 Jan 2009 03:24:06 +0000 http://dbaas.wordpress.com/?page_id=5#comment-17 Here's another, that provides significant functionality in addition to the db (PostgreSQL). Called Younicycle. Each account = a schema Here’s another, that provides significant functionality in addition to the db (PostgreSQL). Called Younicycle. Each account = a schema

]]> Comment on Multi-Tenant Times by Vibhakar Bhushan http://dbaas.wordpress.com/2008/10/19/multi-tenant-times/#comment-11 Vibhakar Bhushan Sun, 19 Oct 2008 17:38:40 +0000 http://dbaas.wordpress.com/?p=13#comment-11 We provide Process/workflow Automation as aservice complementing Salesforce offering. As such I am extremely interested in knowing about how SF have organised their architecture. I would appreciate a trigger, when you publish the paper best regards Vibhakar CTO, Synchosoft We provide Process/workflow Automation as aservice complementing Salesforce offering. As such I am extremely interested in knowing about how SF have organised their architecture. I would appreciate a trigger, when you publish the paper

best regards
Vibhakar
CTO, Synchosoft

]]> Comment on What Exactly Is Database as a Service? by Donjon http://dbaas.wordpress.com/2008/05/14/what-exactly-is-database-as-a-service/#comment-7 Donjon Thu, 19 Jun 2008 14:54:19 +0000 http://dbaas.wordpress.com/?p=4#comment-7 Somehow i missed the point. Probably lost in translation :) Anyway ... nice blog to visit. cheers, Donjon!!! Somehow i missed the point. Probably lost in translation :) Anyway … nice blog to visit.

cheers, Donjon!!!

]]> Comment on What Exactly Is Database as a Service? by sbobrowski http://dbaas.wordpress.com/2008/05/14/what-exactly-is-database-as-a-service/#comment-5 sbobrowski Mon, 19 May 2008 23:16:08 +0000 http://dbaas.wordpress.com/?p=4#comment-5 Peter, Agreed. I also tend to think of DbaaS as a more structured storage approach than a file storage approach. That said, I'll show in some upcoming posts how some of the DbaaS approaches seem to cater to the storage of unstructured data. Peter,

Agreed. I also tend to think of DbaaS as a more structured storage approach than a file storage approach. That said, I’ll show in some upcoming posts how some of the DbaaS approaches seem to cater to the storage of unstructured data.

]]> Comment on What Exactly Is Database as a Service? by Peter Laird http://dbaas.wordpress.com/2008/05/14/what-exactly-is-database-as-a-service/#comment-4 Peter Laird Mon, 19 May 2008 15:08:08 +0000 http://dbaas.wordpress.com/?p=4#comment-4 Great post Steve. I like how you haven't constrained it to be relational DB only. How would you differentiate Storage as a Service vs. DB as a service? Seems like Storage as a Service is a file store, wheras DbaaS allows finer grained access to data? PJL Great post Steve. I like how you haven’t constrained it to be relational DB only.

How would you differentiate Storage as a Service vs. DB as a service? Seems like Storage as a Service is a file store, wheras DbaaS allows finer grained access to data?

PJL

]]>