Preventing Database Breaches with Application-Layer Encryption 2022 | BrightTALK | 16 May 2022 | Virtual
Venue
What is Qwoted?
Qwoted is a free expert network: we help reporters connect with experts & we help those same experts build relationships with top reporters.
| Event Date |
Tue May 17 UTC (over 2 years ago)
In your timezone (EST): Mon May 16 8:00pm - Mon May 16 8:00pm |
| Location | Virtual |
| Region | All |
Details
Data breaches are more prolific than ever, with 2021 seeing 5250 confirmed instances involving large companies such as Facebook, LinkedIn, and Ubiquiti. Such breaches are not only a privacy concern, but are also very costly to the involved organization, incurring a loss of $4.24 million on average. The good news, however, is that in breaches where strong Zero Trust principles were employed this cost decreased by $1.76 million.
In this talk we show how Application-Layer Encryption (ALE) can be applied at the database level to provide strong protections against breaches. While traditional at rest database encryption helps protect your data in case of a direct breach, database ALE can ensure cryptographically that even authorized applications have minimal access. This means, that even if your data producing application contains a vulnerability, compromising this application won't give the attacker access to your data. Through the use of modern cryptographic techniques, database ALE can even be implemented without fully sacrificing useful capabilities of the database, such as search.
Speakers
2022 Speaker
PRESENTER
Phillip Vejre
Cryptographer (PhD) and Tech Lead at CYBERCRYPT