Mitigando o risco de acesso interno não autorizado a dados sensíveis em banco de dados

Abstract

One of the biggest concerns of organizations, in terms of safety in the database, is the imminence of violation and improper access by means of their own employees. According to the center specialized in internal threats of CERT - a division of the Software Engineering Institute (SEI), statistics indicate that the majority of reported cases of loss and/or unauthorized disclosure or use of sensitive data, comes from within companies. Credit card number, phone, address, among other information, are some of the examples that are classified as “sensitive data”and that most of the time are exposed in the database.This article will be demonstrated through encryption techniques, ways to mitigate the risk of unauthorized internal access and leakage of “sensitive data”.