sunhux

<div>
<div class="content wysiwyg-content">
Q1:<br />
In place of database (column or table or TDE) encryption, is encryption by application a good<br />
substitute for it?<br />
<br />
Q2:<br />
What are some of the application encryption methods that are equally acceptable to <br />
Transparent Data Encryption's &nbsp;AES algorithm?<br />
<br />
Q3:<br />
Can suggest any tools/products for encryption by application? &nbsp;We use Java &amp;&nbsp;our<br />
databases are Oracle, running on RHEL7 &amp;&nbsp;Solaris 10? &nbsp; I guess quite a fair bit of<br />
key management is involved?
</div>
</div>


Q1:
In place of database (column or table or TDE) encryption, is encryption by application a good
substitute for it?

Q2:
What are some of the application encryption methods that are equally acceptable to 
Transparent Data Encryption's  AES algorithm?

Q3:
Can suggest any tools/products for encryption by application?  We use Java & our
databases are Oracle, running on RHEL7 & Solaris 10?   I guess quite a fair bit of
key management is involved?

Encryption of data at rest by application

Encryption is the process of encoding messages or information in such a way that only authorized parties can read it. In an encryption scheme, the intended communication information or message, referred to as plaintext, is encrypted using an encryption algorithm, generating ciphertext that can only be read if decrypted. For technical reasons, an encryption scheme usually uses a pseudo-random encryption key generated by an algorithm. An authorized recipient can easily decrypt the message with the key provided by the originator to recipients, but not to unauthorized interceptors.

Encryption

Java is a platform-independent, object-oriented programming language and run-time environment, designed to have as few implementation dependencies as possible such that developers can write one set of code across all platforms using libraries. Most devices will not run Java natively, and require a run-time component to be installed in order to execute a Java program.

Java

Oracle is an object-relational database management system. It supports a large number of languages and application development frameworks. Its primary languages are SQL, PL/SQL and Java, but it also includes support for C and C++. Oracle also has its own enterprise modules and application server software.

Oracle Database

Security is the protection of information systems from theft or damage to the hardware, the software, and the information on them, as well as from disruption or misdirection of the services they provide. The main goal of security is protecting assets, and an asset is anything of value and worthy of protection.  Information Security is a discipline of protecting information assets from threats through safeguards to achieve the objectives of confidentiality, integrity, and availability or CIA for short. On the other hand, disclosure, alteration, and disruption (DAD) compromise the security objectives.