Hybrid Database Encryption with Data in Rest and Data in Motion

Abstract

Security is one of the important aspects in the field of computer science. Out of the various types of securities database security plays a significant role in protecting the sensitive data during the Data-in-Rest and Data-in-Motion level. To perform a secured data transfer, few methods are available and one of them is an encryption of data. The data are to be transferred in an encrypted way while sending and decrypted when they are used. The volatility of the present day, online business environment has left organizations with no alternatives to share sensitive information with their systems, suppliers and business partners. Most of the cryptographic algorithms provide the security of information to be transferred into an insecure medium. Algorithms of those types are in need of data protection from interruption, interception, modification and fabrication. In this way, the security of the data communication is mainly based on the cryptographic algorithms along with their key values. Symmetric and Asymmetric cryptographic algorithms are used the specialized procedure to encrypt or decrypt the data. newlineThere is a possibility that, the hackers may decrypt the message which is either encrypted with symmetric or asymmetric encryption algorithm. Hence, it is essential to hybrid the concept of symmetric and asymmetric technique. The hybrid encryption technique has the advantage of both symmetric and asymmetric way of encrypting. newlineHybrid encryption can provide strong security for Data-in-Rest and Data-in-Motion levels. But developing a database encryption strategy must take many factors into considerations. Encryption at database level, application level and file level has proved to be an ideal method for protecting the sensitive data and delivering the performance. Packaged database encryption solutions have proven to be the best alternative technique to protect the sensitive data. newline Database security is a wide research area and includes topics such as statistical database security, intrusion and detection.