Data encryption in database management system
Download as PPTX, PDF1 like1,573 views
The document discusses data encryption in databases. It defines encryption as a process that transforms data into cipher text that can only be read by those with the decryption key. There are different levels of encryption, including transparent encryption of the entire database, column-level encryption of individual columns, and field-level encryption of specific data fields. Advantages of encryption include security of data at all times, maintaining data integrity and privacy, and protecting data across devices. Disadvantages include key management issues and potential performance impacts of encrypting database content.
Data encryption in database management system
- 1. Data encryption Presented by: Rabin BK BSc.CSIT 4th Semester 1
- 2. Content • Introduction • Roles of Encryption • The process of Encryption • Levels of Data Encryption • Advantages • Disadvantages 2
- 3. Introduction A process that uses an algorithm to transform data stored in a database into "cipher text" that is incomprehensible without first being decrypted The purpose of database encryption is to protect the data stored in a database from being accessed by individuals with potentially "malicious" intentions 3 Data decryption translates data into another form, or code, so that only people with access to a secret key (formally called a decryption key) or password can read it
- 4. The role of Encryption Most database security techniques focus on controlling access passwords, privileges, encrypting data as it travels There is much less focus on protecting data at rest (data in storage) Encryption is increasingly being used to protect data in storage which includes backups and all the pen drives, portable hard drives, mobiles that get lost or stolen Encryption is often described as 'the last line of defense' 4
- 6. Levels of Data Encryption 6 • Transparent/External database encryption – It is used to encrypt an entire database, which therefore involves encrypting "data at rest". – Data at rest can generally be defined as "inactive" data that is not currently being edited or pushed across a network – Transparent Database Encryption ensures that the data on physical storage media cannot be read by malicious individuals that may have the intention to steal them – It does not protect data in transit nor data in use – TDE usually encrypts an entire database and requires a dedicated database
- 7. Levels of Data Encryption 7 • Column-level encryption – A method of database encryption in which the information in every cell (or data field) in a particular column has the same password for access, reading, and writing purposes. – The main disadvantage associated with column-level database encryption is speed, or a loss thereof. – Encrypting separate columns with different unique keys in the same database can cause database performance to decrease, and additionally also decreases the speed at which the contents of the database can be indexed or searched
- 8. Levels of Data Encryption 8 • Field-level encryption – Field-level encryption is the ability to encrypt data in specific data fields. – Once a field is chosen, all the data in that field will automatically be encrypted. – Encryption can be done using either secret or public keys. – Field-Level Encryption does not require a dedicated database
- 9. Disadvantages of encryption 9 There are following problems of Encryption: • Key management (i.e. keeping keys secret) is a problem. Even in public-key encryption the decryption key must be kept secret. • Even in a system that supports encryption, data must often be processed in plaintext form. Thus sensitive data may still be accessible to transaction programs. • Encrypting data gives rise to serious technical problems at the level of physical storage organization. For example indexing over data, which is stored in encrypted form, can be very difficult.
- 10. Advantages of Encryption 10 • Encryption Provides Security for Data at All Times – Encryption works during data transport, no matter where data is stored or how it is used. • Encrypted Data Maintains Integrity – Prevents data from being altered by unknown user • Encryption Protects Privacy – Maintains data privacy by encrypting the data • Encryption Protects Data across Devices – Encryption technology can help protect store data across all devices, even during transfer. Additional security measures like advanced authentication discourages unauthorized users.
- 12. Any Queries 12