The information stored in the application is of a potentially sensitive nature and the privacy of that information must be maintained. Direct access to the computer is controlled through the user logon accounts maintained by Windows 2000.
Internet security is discussed below.
Access to the database information via the Internet application is accomplished entirely through stored procedures and the logon accounts used in the Internet application can only execute these stored procedures. There is no direct access to the underlying data tables. Each Internet user must go through the stored procedures to access the data. An active server page uses interpreted script language to perform a prescribed set of functions. Because it is interpreted script, the active server page contains actual source code which can easily be deciphered if the active server page can be obtained from the web server.