Translucent Databases

Translucent Databases
Order from Barnes & Noble with free shipping
Order from the publisher with free U.S. shipping..
Buy it from Amazon with free shipping.
Read the Table of Contents
Read the FAQ about Translucent Databases
Read a case study of how Amazon could protect the privacy of their customers with a translucent database.
Read a case study of how libraries can protect the security of their patrons.
Here's a list of Case Studies from the book
Support for Professors who use the book in courses.
Download the source code from the book.
Other Books by Peter Wayner
Contact the author: p3@wayner.org
Errors and Corrections
Take a Telecourse in the topic
Take a Full Day Course in Storing Sensitive Information with MySQL
Info for Bookstores
Check out the new title, Policing Online Games
Policing Online Games
Check out the new title, Java RAMBO Manifesto
Java RAMBO Manifesto
Translucent Database Cover


Do you have personal information in your database?

Do you keep files on your customers, your employees, or anyone else?

Do you need to worry about European laws restricting the information you keep?

Do you keep copies of credit card numbers, social security numbers, or other information that might be useful to identity thieves or insurance fraudsters?

Do you deal with medical records or personal secrets?

Most database administrators have some of these worries. Some have all of them. That's why database security is so important.

This new book, Translucent Databases, describes a different attitude toward protecting the information. Most databases provide elaborate control mechanisms for letting the right people in to see the right records. These tools are well-designed and thoroughly tested, but they can only provide so much support. If someone breaks into the operating system itself, all of the data on the hard disk is unveiled. If a clerk, a supervisor, or a system administrator decides to turn traitor, there's nothing anyone can do.

Translucent databases provide better, deeper protection by scrambling the data with encryption algorithms. The solutions use the minimal amount of encryption to ensure that the database is still functional. In the best applications, the personal and sensitive information is protected but the database still delivers the information.


Order directly from the publisher. .
Every database programmer should have a copy of this simple and elegant book on his reference bookshelf. Particularly if he cares about the integrity of his data, the liability to the database's owner should information be misappropriated, and, not least, about freedom itself in a world of ubiquitous, and, frankly, necessary, stored detail: details about practically every person on earth, their property and finances, and, ultimately, everything they do.

-- Robert Hettinga in Slashdot


Had either Yale or Princeton adopted Wayner's principles, this nasty little episode might never have happened.

--Simson Garfinkel on O'Reilly Net


"I would like to recommend this book to everyone who is storing sensitive information in their database. Credit card numbers or other private information from customer statistics data can fall into the wrong hands and give someone else too valuable insights in specific customers behavior.”

-- Michael Widenius, MySQL





" This book is essential reading for DBAs, system architects and IT security professionals, especially those in healthcare who are struggling with meeting HIPAA requirements, and in e-commerce who are challenged by protecting credit card and account information. This book shows the DBA how to secure his or her database, and the system architects and security professionals what is possible using SQL and Java."

-- Mike Tarrani, Amazon Top 50 reviewer


Buy it from Amazon with free shipping.




Take A One Day Course in Translucent Datatbases