Cloud data security challenges
Modern cloud data security solutions
Our offerings
// Cloud data security software
Acra
A DATABASE SECURITY SUITE
To be announced
// Custom solutions and consulting
Tamper-free audit logs
Security engineering
Security advisory
Have a question? Get a human to answer it!
Benefits of our cloud security solutions
Cloud data security in use
Data security in a cloud requires specific thinking, as data is everywhere: apps, databases, logs, 3rd party services, etc. Data security tools like Acra help to build a cloud-agnostic security layer, protecting data whenever it exists. Cloud security becomes an orchestration of tools, policies and processes spread across all places where data appears.
Take a look at this Data Access Object (DAO) architecture as example. A DAO is a service that proxies data exchange between backend services and multiple databases. The DAO controls the dataflow: it knows which data is sensitive and where it's stored, which data fields should be encrypted/decrypted during each request.
Often, the DAO also authenticates applications, and provides high availability.
On the scheme below the DAO calls Acra as encryption service to encrypt/decrypt sensitive data fields. Acra is responsible for key management and audit logging.
Additional relevant materials
The keynote 'Data is a new security boundary' is presented by Anastasiia Voitova at OWASP Global AppSec US 2021. Anastasiia explains how modern data protection combines multiple security controls and follows sensitive data where it exists – from client-side apps to the databases. The YouTube video is available as well.
