Tag Archive

Below you'll find a list of all posts that have been tagged as "data-security"

3 Levels of Successful Triple Layer Data Protection

The growth of high speed computer networks and internet, in particular, has hiked the ease of data communication. But, on the other hand, this growth is also responsible for the snooping of data. The ease, by which digital information can be duplicated and distributed, has led to the need for effective protection tools. Various encryption techniques like cryptography, digital watermarking, steganography etc. have already been introduced in an attempt to address these growing concerns. In this paper, an algorithmic approach is proposed in which, along with the combination of cryptography and compression technique (taken as security layers), an extra layer of security has been imposed in between them to obtain a completely secured data transmission scheme. Problem Statement: Triple Layer Security Protection for vCenter WebClient Plugin’s Admin-User Credential Proposed vCenter Web Client Plugin: Single glass-pane of Storage Management Integrating storage server functionality into vCenter Web Client Framework Customizing/configuring the vCenter Web Client to expose the Storage Server vendor specific functionalities Integrating Alarms, Events and Tasks of vendor specific storage management into vCenter Web Client Alarms, Events and Task console. Need for Triple Layer Security Protection: Storage Server Admin User Credentials configured during the vCenter Web Client Plugin deployment, must be easily reconfigurable at later point of time. Users are expected to make modifications of their Storage Server Admin User Credentials, based on the corporate password change policy. Every time the password changes, it should never insist on redeploying the vCenter Web Client Plugin. Approach for protecting the vCenter Web Client Plugin Admin User Credentials: Triple Layer Security Protection approached is based on 3 levels- Level – 1. vCenter Admin credentials encryption vCenter Admin credentials encryption follows password based encryption(PBE) including Message Digest Algorithm(MD5) and Data Encryption Standard(DES). Use PBEWithMD5AndDes to derive a DES key based on the password. Encrypt the user’s password with that DES key. Hash the salt and ciphertext with MD5, giving 128 bits of hash output. Base64-encode the hash to give you the oRu… value. Develop a Java program that takes a password and outputs a DES encryption key (i.e. implements PBEWithMD5AndDes)with the openssl command, which will do MD5 hashing, DES encryption and Base64 (encoding/decoding). Level – 2. SQlite Database is preferred over other DB. The reason is that, SQlite DB does not require the separate installation procedure and is simple to use. SQlite database creation and inserting credentials Creating an SQLite database. – Use the create or openOrCreate methods in the DatabaseFactory class. Inserting encrypted data: – Insert encrypted data into a table by executing an INSERT statement. – Execute INSERT statements with the Statement.execute method or the Statement.executeInsert method. Level – 3. Compressing the database with password protection. SQlite database is user readable and easy to edit. In order to restrict them we just compress and do password protection for the DB file using 7zip Software Compression Tool. Conclusion: A growing number of users are aware of data being available freely over the internet, thus leading to numerous cases of data theft and security breaches. This elucidates the increasing popularity of data security and encryption. Lack of security mechanism can easily lead to data theft or tampering. Critical data is at a higher risk in such scenarios; this is when we approach using the techniques like above, where we can tighten data security and secure information across the web.

Aziro Marketing

data-security

How do I Ensure a Robust IoT Security?

Previously, we touched upon what the internet of things is and how it revamps the whole world. Its key advantages may change everything as you know it today. The major aspect of IoT is the billions of new devices or “things” that will become part of our worldwide wireless network, and the relentless stream of data that these devices bring to the storage infrastructure extant today. Along with this transformation, a critical question arises: “How can you ensure the security in this IoT world?” Security risks come in all forms. For instance, in 2011, independent security analyst blog Krebs on Security spoke about a new type of data hijacking coming to prevalence, known as juice-jacking. This attack targets your smartphone’s data if you hook your device into one of those public charging stations in airports and metro stations. You have probably seen plenty of examples of software-run cars being hijacked by hackers and viruses and used to put the owners in danger. We have seen similar terror in Hollywood techno-thrillers, such as The Net, Eagle Eye, Antitrust, Firewall, etc. Weak IoT security can make the world seem like it’s under alien attack. This is because IoT connects everything, from your microwave and coffee machine to your garage door to a network, and allows you to remotely operate these devices. You don’t want someone else remotely operating your lights, thermostat, or your car, do you? That will surely be pretty weird. However strong a security system is, it has been proven time and again that it can be broken if a persistent hacker is able to find its Achilles’ heel. As the security systems became more and more advanced, so did the hacking techniques. This is why Edward Snowden used a relatively unknown high-security operating system called Tails, and terrorists like Bin Laden still trusted offline messaging to communicate. With botnets consisting of millions of computers and cloud systems with unlimited processing power, it is easy to hack into any network, even government ones. In the case of IoT, so many statistics exist. Several prognosticators in the IT domain have estimated the size of IoT-connected devices to be in the range of 20-50 billion devices. Hacking figures are not very promising, either. It seems in 2014, almost half of the population of the United States using computers have been hacked in one way or other. If the number of devices goes on increasing, the hacking attempts will also rise relentlessly. Remote network management of huge number of devices is already a challenging area. With the advent of IoT, several industries will have to be network-connected, from retail, manufacturing, to healthcare. Security Preparation As a new wave of network-aware, smart devices are coming into the world, it is high time for security organizations to revamp their security systems. As we are already struggling with high volume of devices connected to far-reaching networks, a lot of research and development is necessary for securing IoT in a big way. In view of this, here is 5 security steps procedure from Aziro (formerly MSys Technologies) – A leading IoT solutions and services provider that a consumer should ensure. Learn about the device sensors you have. For instance, if you have an advanced smartphone, it has a camera, GPS system, accelerometer, compass, barometer, temperature sensor, and many other such advanced features. You should be aware of these advanced features at the time of getting your device. This will give you an idea of what should be allowed to an application and what should not. Both iOS and Android let you decide which features of your device can be accessed by an app. Learn about the data access and communication capabilities of your devices. How are they communicating, and what speed is achievable by the device at any point of time. This will let you identify if the device is operating normally or if it’s transmitting any unnecessary amount of data. Take advantage of all security features available in your devices. Every smartphone comes with built-in security features, such as the thumb-print access in the iPhone. Learn about and make use of all these security features to be extra-safe. Take advantage of all network security features given by your network. Most of the routers available today let you have advanced security features such as WPA2 encryption and MAC address filtering. Take advantage of these features to be sure that your connection is always secure. A major part of the security, and one that can actually weaken your entire security if you are not careful enough is the password. A strong password is like an impossible barrier for hackers. A weak password, such as “password1” can easily open your doorway to hackers at any time. Make your passwords long and riddled with special characters. Conclusion IoT, while it makes the world a better place, comes with a lot of concerns. Securing IoT devices will become a huge industry in itself tomorrow. Only proper consumer awareness can help fight hackers in such a massively interconnected world. There are numerous IoT development services and IoT services provider that can help navigate the security risks.

Aziro Marketing

data-security iot security

Ensure All-Round Cloud Data Warehouse Security With these 3 Measures

The volume, scope, and severity of cyberattacks seem to be swelling with the sudden rise in remote business interactions. Reportedly, Australian multi-national banking and services firm ANZ has had data breaches in 47% of its businesses. This raises the question that with organizations collecting data blocks from any and every source they can get their hands on – How secure are our storage resources?Cloud Data warehouse holds data from multiple sources, including internal audits, customer data, marketing feedback, and more. Protecting such critical business influencing data cannot be left to the usual cloud storage security measures we employ. We need network security and access control methods that are specific to the cloud data warehouse architecture. How do we go about it, and what are these security methods exclusive to the needs of a cloud data warehouse? This would be the prime discussion in this blog.Security Overview for Cloud Data WarehouseThe cloud data warehouse vendors like Amazon Redshift, Azure SQL warehouse, etc., have multiple security procedures dedicated to protecting the cloud warehouse data. The API calls are monitored and controlled for their access. Clients are encouraged to support appropriate security layers like TLS 1.0 or later. The data is encrypted with forwarding secrecy ciphers like Diffie-Hellman (DHE). The request authorization is controlled using access IDs, security groups, etc. Some vendors also use temporary security credentials for certain requests. Resource based access also allows the cloud data warehouses to restrict resource access for certain source IPs.Broadly classifying the dedicated security measures for cloud data warehouse would leave us with:Network SecurityCluster SecurityConnection SecurityWe will now discuss these three security aspects one by one.Network SecurityFor cloud data warehouses, network security is worked through network isolation. Most of the venders prefer logically isolated and virtually private cloud networks where the clusters can be deployed using the following steps:Step 1 – A logically isolated network layer is created using specifics like – Subnet, routing table, network gateway, and network endpoints.Step 2 – The allocation and aggregation of the network are done using Classless Inter-Domain Routing (CIDR).Step 3 – Interfaces like consoles, CLIs and SDKs, are created to access the networks.Step 4 – Two or more subnets are created for dedicated accounts.Step 5 – The cluster is deployed in the network.The cluster can be locked down for inbound network traffic. You can decide which IP addresses are permitted to access the cluster in your network. Therefore, the network is all secure to entertain the client request, and what remains is to secure the clusters themselves.Cluster SecurityGenerally, the cloud data warehouses have the cluster locked for access by default. They are later granted access as per the resources requirement and process handling they are deployed for. An effective way to do this is by categorizing the clusters into security groups. These security groups define the access control depending on the network subnet provisioned for the cluster. Vendors like Amazon Redshift have default as well as customized classes called the security groups. With customized classes, one can define access policies by themselves.The policies that categorize these security groups generally are meant to identify a range of IPs that are permitted to access the corresponding clusters. The classes can be created with or without a cluster provisioned to them. The inbound access policies can be defined for the group and the cluster can be launched later. There are mainly three kinds of interfaces that can be employed to create security groups.GUI Consoles – GUI consoles can help to create security groups on the basis of details like class name, CIDR range, IP authorization details, and user account authentication details. These consoles are offered internally by most of the cloud data warehouse vendors. They can also be used to define the access policies for the group.CLI Commands – Most of the cloud vendors also offer CLI commands for creating the security groups, adding or revoking the access policies, and managing the clustersSDKs – Open source codes for Java or AWS SDKs are available for managing the security groups. The default code doesn’t have any ingress rules, and they can be added to the code as per the CIDR range required.With clusters and subnets secured using security groups, additional security can be ensured by securing the connections that access these networks and clusters.Connection SecurityThe connection security majorly deals with securing the endpoints on the connections. Any API requesting a connection with the cluster can be provided access using a secure endpoint like Virtual Private Cloud (VPC) instead of a public network. With the endpoint secure, the ODBC and JDBC connections can establish the communication between the client and the warehouse more securely. The endpoint security can be ensured using resources like – VPNs, Internet gateways, network address translation, or like Amazon Redshift, directly accessing the AWS Network.The private connection can be created with a secure DNS that can be customized or offered by the vendor.Here are some of the code snippets for a different kind of VPCs offered by AWS:Denying all accessSpecific User AccessRead-Only AccessEnd-point security also protects the network from use prone access issues. With the network, clusters, and API requests secured, the additional layers for cloud storage security can ensure that the organizational data is all safe for business.Security MonitoringApart from the above discussed measures, it is also necessary that the warehouse is constantly monitored for security misbehavior. Consistent monitoring of the network, workload and clusters from a security point of view can be configured with regular reports on surface level dashboards.Final ThoughtsCloud Data warehouses are all set to churn out influential business insights through the data being fed to them from multiple sources. While this makes them a gold mine for pioneering business ventures, they also become a target for security breaches, data losses, and network attacks. Therefore, apart from the security and data protection available for cloud storage infrastructures, these warehouses would need specific security measures that align with their own architecture. With the measures discussed above, you can rest assured of the knowledge and intelligence that the cloud warehouse has to offer.

Aziro Marketing

Cloud Security data-security Security Monitoring

EXPLORE ALL TAGS

Ansible Test Automation

application containerization

applications

Application Security

application testing

artificial intelligence

asynchronous replication

business intelligence

Cloud Cost Optimization

cloud devops

Cloud Infrastructure

Cloud Interoperability

Cloud Native Solution

Cloud Storage Security

Codeless Automation

Cognitive analytics

Configuration Management

container world conference

continuous-delivery

continuous deployment

continuous integration

data backup and recovery

Descriptive analytics

Descriptive analytics tools

Digital Transformation

dockercon 2019 san francisco

end-to-end-test-automation

High Performance Computing

icinga for monitoring

Image Recognition 2024

kubernetesday bangalore

Low-Code No-Code Platforms

mobile-application-testing

mobile-automation-testing

Predictive analytics tools

prescriptive analysis

Rapid Application Development

raspberry pi

RDMA

real time analytics

realtime analytics platforms

Real-time data analytics

Recovery

Recovery as a service

recovery as service

rsa

rsa 2019

rsa 2019 san francisco

Selenium Test Automation

selenium testng

serverless

Serverless Computing

Site Reliability Engineering

software defined storage

software-testing

software testing trends

software testing trends 2019

storage virtualization

support

Synchronous Replication

testing automation tools

thought leadership articles

trends

tutorials

ui automation testing

ui testing

ui testing automation

vCenter Operations Manager

vmworld 2019 san francisco

VMworld 2019 US

vROM

Web Automation Testing

web test automation

WFH

LET'S ENGINEER

Your Next Product Breakthrough

Book a Free 30-minute Meeting with our technology experts.

Aziro has been a true engineering partner in our digital transformation journey. Their AI-native approach and deep technical expertise helped us modernize our infrastructure and accelerate product delivery without compromising quality. The collaboration has been seamless, efficient, and outcome-driven.

CTO

Fortune 500 company