Data Security

Overview

With new data security laws like GDPR, there is a whole new focus on securing sensitive data. Clear text or default passwords have always been a source of opening backdoors by a brute-force attack. Password authentication has been the key to access control over devices. However, with the same or default passwords given on publication, they can prove to be the initial cause of brute force attacks. Tokens can be a good alternative to sharing sensitive data such as usernames and passwords over unsecured networks. Encryption on tokens can assure no communication of private data.

HSC provides custom data security services to help enterprises safeguard their organization’s critical data by incorporating a strategy that is risk-balanced as well as based on the latest data security best practices. Here’s how HSC provides differentiated services for data-at-rest and data-in-motion:

Data at Rest

• Symmetric and Asymmetric encryption used to encrypt the sensitive data
• Key Management is done through Key Management Server using open Key Management Interoperability Protocol (KMIP)
• HSM integration for key management
• Never put critical information like Encryption key, salts in code, GIT, Centralized key management solution recommended – self-managed or solutions like Vault, HashiCorp, Cloud Managed solutions
• Role-based and attribute-based access control
• COTS Identity and Access Management solution recommended for a large enterprise-grade solution
• Salt-based Hashing for information like password, IDs which does not need original value directly

Data In Motion

• PKI
  • Public Key Infrastructure usage to manage identities and secure the communication channel
  • Implementation of Certificate Management System for PKI based systems

   

• JWT
  • Access tokens for accessing a network function
  • Time-based access tokens
  • Access token rotation

   

• Contract Management
  • Defined Contract exposed by public APIs to avoid any SQL injection or data tempering

With both consulting and integration services, HSC can help enterprises optimize control over data using market-leading data loss prevention and data encryption technologies.