{"id":8004,"date":"2022-07-20T10:24:04","date_gmt":"2022-07-20T10:24:04","guid":{"rendered":"https:\/\/outofsite.biz\/cynance\/?p=8004"},"modified":"2022-08-16T12:36:36","modified_gmt":"2022-08-16T12:36:36","slug":"encryption-of-data-in-use-data-protection","status":"publish","type":"post","link":"https:\/\/outofsite.biz\/cynance\/encryption-of-data-in-use-data-protection\/","title":{"rendered":"Encryption of data in use: A new standard in data protection"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-post\" data-elementor-id=\"8004\" class=\"elementor elementor-8004\">\n\t\t\t\t\t\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-45e0897e elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"45e0897e\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-2a13f229\" data-id=\"2a13f229\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-264884f6 elementor-widget elementor-widget-text-editor\" data-id=\"264884f6\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<style>\/*! elementor - v3.11.5 - 14-03-2023 *\/\n.elementor-widget-text-editor.elementor-drop-cap-view-stacked .elementor-drop-cap{background-color:#818a91;color:#fff}.elementor-widget-text-editor.elementor-drop-cap-view-framed .elementor-drop-cap{color:#818a91;border:3px solid;background-color:transparent}.elementor-widget-text-editor:not(.elementor-drop-cap-view-default) .elementor-drop-cap{margin-top:8px}.elementor-widget-text-editor:not(.elementor-drop-cap-view-default) .elementor-drop-cap-letter{width:1em;height:1em}.elementor-widget-text-editor .elementor-drop-cap{float:left;text-align:center;line-height:1;font-size:50px}.elementor-widget-text-editor .elementor-drop-cap-letter{display:inline-block}<\/style>\t\t\t\t<p><span style=\"font-weight: 400;\">Cybersecurity best practice states that organisations should incorporate encryption into their cybersecurity practices in order to protect user data. However, traditional encryption technology has only provided coverage for data when it is in transit or at rest, and there have been limited tools available for <\/span><a href=\"https:\/\/www.vaultree.com\/\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">encryption of data in use<\/span><\/a><span style=\"font-weight: 400;\">.<\/span><\/p><p><span style=\"font-weight: 400;\">The lack of encryption of data in use technology has increased risk for organisations, especially as evolving attack tools and techniques take advantage of any moment of weakness in systems, including when data is decrypted in order to process it.<\/span><\/p><h2><span style=\"font-weight: 400;\">What is encryption at rest, in transit, and in use? And why is it important?<\/span><\/h2><p><span style=\"font-weight: 400;\">So, <\/span><a href=\"https:\/\/www.vaultree.com\/blog\/an-introduction-to-cryptography\/\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">what is encryption<\/span><\/a><span style=\"font-weight: 400;\">? Data encryption transforms data into a code (or cipher text) making it unreadable to anyone who doesn\u2019t have the authorisation to read it (usually with a decryption key).<\/span><\/p><p><b>Encryption for data in transit: <\/b><span style=\"font-weight: 400;\">Data is vulnerable to interception as it travels across the internet. Encrypting data before it is sent over the internet will ensure that even if it is intercepted, the interceptor will not be able to use it unless they have a way to turn it back into plain text.\u00a0<\/span><\/p><p><span style=\"font-weight: 400;\">Encryption methods for data in transit include encrypting emails using encryption software, using a VPN to connect to the internet, or protecting websites and connections with HTTPS and TLS.<\/span><\/p><p><b>Encryption for data at rest:<\/b><span style=\"font-weight: 400;\"> Data saved or archived on the network is vulnerable to attacks once an attacker is within the network. Encrypting data at rest ensures that it can be left sitting there quietly secure in the knowledge that if all other protections fail, an attacker who steals it will be unable to sell it as it is unreadable without the key.\u00a0<\/span><\/p><p><span style=\"font-weight: 400;\">Data at rest is usually encrypted using file-level encryption which locks down individual files, or whole-disk encryption which protects the entire hard drive of a laptop.<\/span><\/p><p><b>Encryption for data in use:<\/b><span style=\"font-weight: 400;\"> Data is in use when it is accessed or consumed by a user or application. Data in use is the most vulnerable form of data as it is stored in clear text in the memory for the duration of its usage.<\/span><\/p><p><span style=\"font-weight: 400;\">Traditionally, the advice for organisations in the <\/span><a href=\"https:\/\/outofsite.biz\/cynance\/is-it-legal-to-pay-ransomware-demands\/\"><span style=\"font-weight: 400;\">battle against ransomware<\/span><\/a><span style=\"font-weight: 400;\"> and other forms of cyber attack has focussed on encryption in transit and at rest, because the technology existed while effective technology for encrypting data in use was not yet available.\u00a0<\/span><\/p><p><span style=\"font-weight: 400;\">But that is about to change with new encryption technologies and <\/span><a href=\"https:\/\/www.vaultree.com\/\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">encryption as a service providers<\/span><\/a><span style=\"font-weight: 400;\"> such as Vaultree.<\/span><\/p><h2><span style=\"font-weight: 400;\">Achieving ultimate protection of data: encryption of data in use<\/span><\/h2><p><span style=\"font-weight: 400;\">As encryption protections for data in transit and data at rest improve and are adopted widely, attackers will look to exploit the weakest element of data, data in use, instead. This has increased the need for that final defence, encryption of data in use.<\/span><\/p><p><span style=\"font-weight: 400;\">However, the question of how to encrypt data in use has been challenging for security professionals. By its nature, data in use is data that is changing, and the problem has been how to ensure that the changed data will show the desired outputs when it is decrypted. In addition, early data in use encryption tools were too slow to use.<\/span><\/p><p><span style=\"font-weight: 400;\">But that is changing with searchable symmetric encryption technologies devised by companies such as <\/span><a href=\"https:\/\/www.vaultree.com\/\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">Vaultree<\/span><\/a><span style=\"font-weight: 400;\">, that are finally able to address these challenges and process encrypted data at nearly the same speed as processing plain text (unencrypted) data.<\/span><\/p><p><span style=\"font-weight: 400;\">Homomorphic encryption allows data to be used as though it is in plain text while keeping it in cipher text. In homomorphic encryption, the text is never decrypted even while it is being worked with.<\/span><\/p><p><a href=\"https:\/\/www.vaultree.com\/blog\/what-is-searchable-symmetric-encryption-sse-and-what-are-its-advantages\/\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">Searchable symmetric encryption<\/span><\/a><span style=\"font-weight: 400;\"> enables users to search through encrypted data selectively identifying specific required information, and moving it on to the next use. In turn, this then enables organisations to share or process just the relevant pieces of data without decrypting an entire dataset exposing it to potential attack.<\/span><\/p><p><span style=\"font-weight: 400;\">The future of encryption is here, and it is focussed on supporting organisations to protect their data as completely as possible. Adding encryption of data in use to the wider <\/span><a href=\"https:\/\/outofsite.biz\/cynance\/security-risk-and-compliance\/cybersecurity-risk-management\/\"><span style=\"font-weight: 400;\">cybersecurity programme<\/span><\/a><span style=\"font-weight: 400;\"> ensures that when all else fails, and access is gained to data, attackers still can\u2019t use it. But it is definitely preferable that it doesn\u2019t get tested.<\/span><\/p><p><span style=\"font-weight: 400;\">Stay safe<\/span><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>Cybersecurity best practice states that organisations should incorporate encryption into their cybersecurity practices in order to protect user data. However, traditional encryption technology has only provided coverage for data when it is in transit or at rest, and there have been limited tools available for encryption of data in use. The lack of encryption of&hellip;<\/p>\n","protected":false},"author":10,"featured_media":8100,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[18],"tags":[63,62],"_links":{"self":[{"href":"https:\/\/outofsite.biz\/cynance\/wp-json\/wp\/v2\/posts\/8004"}],"collection":[{"href":"https:\/\/outofsite.biz\/cynance\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/outofsite.biz\/cynance\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/outofsite.biz\/cynance\/wp-json\/wp\/v2\/users\/10"}],"replies":[{"embeddable":true,"href":"https:\/\/outofsite.biz\/cynance\/wp-json\/wp\/v2\/comments?post=8004"}],"version-history":[{"count":20,"href":"https:\/\/outofsite.biz\/cynance\/wp-json\/wp\/v2\/posts\/8004\/revisions"}],"predecessor-version":[{"id":8210,"href":"https:\/\/outofsite.biz\/cynance\/wp-json\/wp\/v2\/posts\/8004\/revisions\/8210"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/outofsite.biz\/cynance\/wp-json\/wp\/v2\/media\/8100"}],"wp:attachment":[{"href":"https:\/\/outofsite.biz\/cynance\/wp-json\/wp\/v2\/media?parent=8004"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/outofsite.biz\/cynance\/wp-json\/wp\/v2\/categories?post=8004"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/outofsite.biz\/cynance\/wp-json\/wp\/v2\/tags?post=8004"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}