1.Data at Rest (DAR)
+Encryption,Redundancy
2.Data in motion (DIM)
+Separation/Isolation,Transport Security,VLANs.
+SSL/TLS create ad encrypted tunnel.
+IPSec tunnel mode is also a good solution.
3.Data in Use (DIU)
+Protection of APIs,digital signatures and encryption,restricted access.
+Homomorphic encryption.The idea is that if we could keep a datasets encrypted while being manipulated in memory or shared with another application,we would then never have to decrypt it,making the data transaction safer.
0 Comments