Top Ten Tips for Protecting Data in 200631 January 2006
NetLib, a leading innovator of data encryption security software for the enterprise and developers, in light of the recent security issues, suggests the top ten ways companies can protect their business critical data using a simplified approach.
According to a recent survey, data security and protection is the top IT spending priority for 2006. As more government policies are passed and companies search for answers to protecting their customer's data, NetLib, a Microsoft Certified Partner, provides expert insight into the problems facing businesses across the globe.
Top 10 Tips for Data Protection
1) Limit the number of users authorized to access the database. This
would seem obvious to most but it is often overlooked.
2) To that end, prevent physical access to the machine by unauthorized
people. It is virtually impossible to maintain security if there is
unlimited physical access to a machine.
3) Most hackers are not Einsteins. They are looking for the lowest
hanging fruit. Leaving databases or backups unencrypted is inviting
anyone in.
4) When given the choice, choose pass phrases to encrypt data rather than
passwords. Pass phrases are expressions or combinations of words that
are easy for you to remember but difficult for other people to guess.
Preferably things in your everyday life should jog your memory. For
example, if you pass four traffic lights on the way to work, your
passphrase could be pass4lights. A lot easier to remember than
GB1764T, and a lot more effective than your kid's birthday.
5) Keep keys separated from data. At a minimum, keys should be stored in
a different file but preferably on a different drive, server, or
device(e.g., USB jump drive).
6) When encrypting columns in a table, make sure the same plaintext
values encrypt to different ciphertext values. This is especially
important for short columns such as passwords, salaries and expiration
dates.
7) Understand your critical business needs - Whole database vs. Column
encryption. Are you protecting specific data (e.g., credit card
numbers, test scores) from the outside world? Or are you protecting
your intellectual property (e.g., schema and proprietary data) from
your customer? Contrary to what you have read, whole database
encryption is not slower on a properly sized machine.
8) Make sure that critical data on backups, desktops, and laptops is
encrypted, not just the data on servers. Remember that sometimes the
person you need to restrict is the backup operator, or the desktop or
laptop user! So built-in Windows protection is not always the answer.
9) There is no perfect security. Don't let the apparent complexity of the
problem prevent you from taking simple steps. Sometimes several
levels of tools that are easy to deploy and maintain are a lot more
effective than a single super-tool that is designed to solve
everything. Sometimes the super tool is so complex that it is never
deployed effectively, or encourages users to figure out ways around
it.
10) Defend, don't just restrict. For years NetLib has been pointing out
that most organizations spend all their energy on restricting
unauthorized access to data, while leaving data completely unencrypted
once unauthorized access does occur.
NetLib recently launched Encryptionizer(R) for SQL Server Column Encryption Manager (Col-E). Col-E(R) is an add-on to their already highly rated Encryptionizer product line. It eases and advances the state of the art of enhanced security for protecting business critical data. The ultimate goal is deliver a simplified approach, providing real value and superior customer support and service.
Encryptionizer for SQL Server offers a point-and-click user interface to encrypt columns quickly and easily. Col-E introduces an industry-unique feature - Repeating Values Protection(TM) (RVP). Deployment can be accomplished in as little as a few hours and offers the ability to add an additional layer of security separate from Windows and SQL security. It can be deployed without programming and without adding any administrative overhead.
NetLib's industry expertise and innovative products enable a unique approach to the protection of data and intellectual property at an affordable price with minimal time and effort to deploy and administer, resulting in enterprise class security for companies and developers alike.
"The importance of data protection - whether it is that of your company's or your customers - can no longer be ignored," said Elisabeth Stonehill, vice president of product development and sales for NetLib. "NetLib has proven that the process doesn't have to be expensive, and, quite frankly, it's just not that hard. As a trusted business partner to all of our customers for the past 20 years we can tell you that a simplified approach is the best first step towards data protection. And if you don't believe us just ask our customers."
NetLib is the only vendor in this space to offer both whole database and column encryption, the most comprehensive and flexible approach to meeting demanding security requirements. NetLib's flagship product, Encryptionizer, is a highly scalable and easy to deploy solution to meet business security requirements.
About NetLib
NetLib (R), a Microsoft Certified Partner, is a leading innovator of data encryption security software for the enterprise and developers. The company offers an unparalleled track record of success combining its award winning, innovative software with nearly 20 years industry expertise developing security software. NetLib offers the most scalable and easy to deploy solutions to protecting your data wherever it resides. Companies and developers alike also benefit from a low total cost of ownership and improved operational efficiencies with no ongoing administration or programming required. Encryptionizer (R), the company's flagship product, is a developer friendly tool that offers a flexible environment enabling automatic, whole database or file encryption as well as an optional API set. Based in Stamford, Connecticut, NetLib has been helping Fortune 100 companies, small and medium sized business, and developers worldwide provide enhanced protection of data and intellectual property since 1986. For more information, visit us at http://www.netlib.com.
* NetLib and Encryptionizer are Registered Trademarks, and Col-E and Repeating Values Protection are trademarks of Communication Horizons DBA NetLib. US and International Patents Pending.
Press / Analyst Inquiries:
press@netlib.com
(203) 286-2885
Source: prnewswire
All trademarks and copyrighted information contained herein are the property of their respective owners.
Related Computer Hardware Articles
|
