Database Security - Which Database to use?

Currently my .net Desktop app uses an access database which i know has little security.

I need to secure the data so am looking for suggestions on the type of database to use.

I've tried SQlite with encryption, however during runtime the database is decrypted so can be opened whilst the app is running or should the app crash the database is left decrypted.

Can anyone recommend which database to use that will offer a good security option (ideally an encrypted database which the app can read/write but doesnt decrypt the database in a seperate file)

Thanks

How smart are your attackers?

Ultimately, your data will be on their systems, whether it is encrypted or not. How difficult would it be for the user to hack your program to make use of your own code to read the DB?

Shaggy, what database would you personally use if you were selling a desktop program?

Quote:

---

Originally Posted by experience

Shaggy, what database would you personally use if you were selling a desktop program?

---

I would think that would depend on what you were doing with the program, example using it to store data on the internet or just on the local machine. If it were on the internet I would use SQL and if it were local I would probably go Access.

I usually roll with SQL Server Express or SQL Server Compact Edition (SQL CE).

-tg

Database needs to be stored on the local machine, which rules out SQL server express & CE.

Local databases that i know of:
Access (Free-little security)
Sqlite (Free-Moderate security)
Oracle Express (Free-security ?)
IBM DB2 (Expensive-good security)
Others.....?

So if you had an application that made you $40,000 per year, what database would you use taking into account security.

I could possibly look into an online database, would this be practical/fast when 50 rows of data are pulled at once (currently takes a split second)?

Database needs to be stored on the local machine, which rules out SQL server express & CE.

Local databases that i know of:
Access (Free-little security)
Sqlite (Free-Moderate security)
Oracle Express (Free-security ?)
IBM DB2 (Expensive-good security)
Others.....?

So if you had an application that made you $40,000 per year, what database would you use taking into account security.

I could possibly look into an online database, would this be practical/fast when 50 rows of data are pulled at once (currently takes a split second)?

Quote:

---

Originally Posted by experience

Database needs to be stored on the local machine, which rules out SQL server express & CE.

Local databases that i know of:
Access (Free-little security)
Sqlite (Free-Moderate security)
Oracle Express (Free-security ?)
IBM DB2 (Expensive-good security)
Others.....?

So if you had an application that made you $40,000 per year, what database would you use taking into account security.

I could possibly look into an online database, would this be practical/fast when 50 rows of data are pulled at once (currently takes a split second)?

---

What? I use SQL Server Express and CE all the time locally.... actually, that the ONLY way to use CE ... locally... And while SQL Express can act as a server, it was intended as a local datasource (as evidenced by the default setting of not accepting connections from remote machines)...

So I dismiss your dismissal... especially since you then went on to include Oracle Express... also, you missed MySQL as an option.

-tg

So i could use SQL SE & CE without having to install any sql software on the client PC?

I use MySQL on my own PC for my localhost testing, again could that be used on a client pc without having to install MySQL?

After doing a bit of reading i see the SQL CE can be deployed with the reference dll's included, so sql server doesnt need to be installed on the client PC :)