Data caching security concerns in asp.net

Question

well caching is a perfect way to speed up access to data which are public ( all users of website ) and frequently used. but what about data that are supposed to be accessed by a specific role ( e.g just Administrators ) .

is this sort of caching safe ? is there any security related actions to do when using Data caching ?

It depends on you business logic, fetching and displaying data from database/cache will be upto you logic. So you may create some area which can only be accessed by authenticated users. Then show you data from cache. Use cache only for those data which is frequent, and used by all the users. That will increase performance. — user841123
– user841123, Commented Sep 19, 2012 at 6:11
msdn.microsoft.com/en-us/library/hh404101.aspx check to how much data is useful to provide over client side ! — Viral Shah
– Viral Shah, Commented Sep 19, 2012 at 6:12

to StackOverflow · Accepted Answer · 2012-09-19 06:19:53Z

2

The security issues for accessing sensitive data from the Cache are exactly the same as those when accessing sensitive data from any other source, e.g. a database.

You just need to implement the appropriate authorization before exposing it to the user.

answered Sep 19, 2012 at 6:19

to StackOverflow

125k34 gold badges212 silver badges345 bronze badges

Sign up to request clarification or add additional context in comments.

2 Comments

mohsen.d Over a year ago

good point , that's what I've done . I just wonder if is it safe to keep non-public data in memory for a while ?

to StackOverflow Over a year ago

If someone can get at the contents of your server memory, you're hacked, and they'll probably be able to get at your data wherever it is: database, in-memory cache or wherever. So yes, I'd say it's safe to keep it in memory for a while.

Collectives™ on Stack Overflow

Data caching security concerns in asp.net

1 Answer 1

2 Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

2 Comments

Your Answer

Sign up or log in

Post as a guest

Related