Top Security Questions: Delight Your CISO and Protect Your Business

on YouTube ↗19m

" summary

YugabyteDB Anywhere describes exact security mechanics: column encryption uses PGcrypto (symmetric faster than asymmetric) and cluster-wide envelope-based encryption with per-file data keys, universe keys in a catalog and master keys in Azure/GCP/AWS/ HashiCorp Vault; key rotation relies on compaction, not full re-encryption. TLS and optional mTLS distribute certs (can pull from Vault), auth integrates LDAP and OpenID Connect with SCRAM-SHA-256 recommended, RBAC plus row-level security, ISO27001-aligned SDLC, SOC2 audits, MITRE CNA participation, plus third-party pentests and binary/source/runtime analysis.

AI-written summary · about

" chapters (9)

1. 0:00Introduction
2. 0:33Agenda
3. 1:27What is GBDB
4. 2:50How does GBDB support encryption
5. 7:10How does GBDB support encryption and transit
6. 9:22How does GBDB support encryption key management
7. 12:06How does GBDB support authentication and authorization
8. 15:06Does GBDB Implement a Secure SDLC
9. 17:35What Types of Security Testing Are Performed

" related talks

• 18mBulletproofing your YugabyteDB Infrastructure to Reduce RiskMaurice Olsen · Distributed SQL Summit Asia 2022
• 25mProtecting Your Data in Yugabyte Cloud with HashiCorpGrant Orchard · Distributed SQL Summit Asia 2022
• 26mVault + Distributed SQL: Protecting Data Where it LivesAndy Manoske · Distributed SQL Summit Asia 2021
• 48mProtecting the confidentiality and integrity of your high value data with Azure SQL and SQL Server 2Jakub Szymaszek · SQLBits 2023
• 40mUnderstanding the cryptographic controls in Azure SQL DatabaseMichael Howard · Microsoft Build 2023
• 40mPostgreSQL and DevSecOps Ensuring database security in DevSecOpsTim Steward · PGConf NYC 2022
• 48mColumn encryption solutions and ideasPeter Eisentraut · PostgreSQL Conference Europe 2024
• 59mDatabase Encryption in a GDPR WorldScott Dutton · PHP UK Conference 2019