Thales CipherTrust Data Security Platform (CDSP) is an integrated data-centric security platform designed to help organizations discover, protect and control sensitive data across on-premises, cloud and hybrid environments. By bringing together data discovery and classification, data protection, centralized key management and granular access controls, CipherTrust helps organizations reduce data security complexity, accelerate compliance and maintain control over sensitive information wherever it resides.
CipherTrust provides a unified approach to securing databases, files, applications, cloud workloads and other data assets. Organizations can identify where sensitive data resides, understand its exposure and access patterns, apply the appropriate protection mechanisms, and centrally manage encryption keys and security policies.
Key Features
CipherTrust helps organizations identify and classify sensitive information across files, databases, big data environments and other data stores. Machine learning capabilities can assist in identifying sensitive data and providing visibility into where it resides and how it is exposed.
Organizations can apply different protection mechanisms according to their security and compliance requirements, including encryption, tokenization, data masking and application-level data protection. These capabilities help protect sensitive information across physical, virtual and cloud environments.
CipherTrust provides centralized management of encryption keys and security policies, helping organizations maintain control over cryptographic keys across multiple environments and platforms.
CipherTrust enables organizations to apply granular controls over access to sensitive data, helping limit exposure based on users, applications, policies and other security requirements.
CipherTrust can provide visibility into sensitive data exposure, data access patterns, user activity and policy enforcement, helping security teams identify anomalies and prioritize data protection activities.
CipherTrust supports data protection across public, private and hybrid cloud environments, including integrations with leading cloud platforms such as AWS, Microsoft Azure and Google Cloud.
CipherTrust includes secrets management capabilities designed to securely store, manage and distribute secrets used by applications, development environments and cloud workloads.
Benefits
Discover Sensitive Data
Gain visibility into where sensitive information resides, how it is accessed and where data exposure risks exist.
Protect Data Everywhere
Apply encryption, tokenization, masking and other protection mechanisms across databases, files, applications, backups and cloud environments.
Maintain Control of Encryption Keys
Centrally manage encryption keys and security policies across different platforms and environments.
Simplify Data Security
Bring multiple data security capabilities together within a unified platform to reduce operational complexity.
Accelerate Compliance
Support data protection and regulatory requirements with centralized controls, data visibility and reporting capabilities.
Secure Cloud Migration
Protect sensitive information as organizations move workloads and data across public, private and hybrid cloud environments.
Reduce Data Exposure Risk
Identify sensitive data and apply appropriate protection and access controls to reduce the potential impact of unauthorized access or data breaches.
CipherTrust brings together several core capabilities within one data security architecture:
1. Discover
Identify sensitive data, classify information and understand where sensitive assets are located across the organization.
2. Analyze
Monitor data access patterns, user activity and policy enforcement to identify anomalies and understand data risk.
3. Protect
Apply encryption, tokenization, masking and other data protection mechanisms according to the sensitivity and use of the data.
4. Control
Centrally manage encryption keys, secrets and security policies while maintaining control over sensitive data across on-premises and cloud environments.
Modern organizations have sensitive information distributed across databases, applications, file systems, virtual infrastructure and multiple cloud environments. Managing these environments with separate security technologies can increase operational complexity and make it harder to maintain consistent protection.
CipherTrust addresses this challenge by bringing data discovery, classification, protection and centralized key and secrets management into an integrated platform. This data-centric approach enables organizations to apply consistent security controls while maintaining visibility and control over sensitive information across their environment.
CipherTrust supports both on-premises deployment and cloud-based deployment, allowing organizations to select an approach based on their security, compliance, data residency and operational requirements.
| Capability | CipherTrust Data Security Platform |
|---|---|
| Solution Type | Integrated Data Security Platform |
| Security Approach | Data-centric security |
| Core Framework | Discover, Analyze, Protect, Control |
| Data Discovery | Yes |
| Data Classification | Yes |
| Encryption | Yes |
| Tokenization | Yes |
| Data Masking | Yes |
| Key Management | Centralized |
| Secrets Management | Yes |
| Access Controls | Granular |
| Deployment | On-premises, Cloud & Hybrid |
| Cloud Support | AWS, Microsoft Azure, Google Cloud and others |
| Data Protection | Databases, Files, Applications, Cloud & Virtual Environments |
Information
Perlindungan Data Aplikasi CipherTrust
Bisakah perlindungan data menyelaraskan DevOps dan Keamanan?
Menghemat waktu dan kesulitan pengembang perangkat lunak untuk menjadi ahli kriptografi dan pengelola kunci enkripsi sebenarnya mungkin! Tapi mengapa mengintegrasikan perlindungan data ke dalam aplikasi? Karena melindungi data dalam aplikasi, segera setelah dibuat atau diterima pertama kali, dapat memberikan tingkat keamanan data tertinggi. Sekarang setelah kami menangani alasannya, mari pikirkan tentang cara mengaktifkan pengembang untuk melindungi data yang melewati aplikasi mereka. Pertama, ada banyak bahasa pemrograman dan lingkungan operasi (OS, middleware), jadi, solusi harus sesuai dengan bahasa yang paling mungkin dengan API yang paling sederhana dan didukung dengan banyak kemungkinan lingkungan operasi juga. Kedua, solusinya harus cukup fleksibel untuk mengenkripsi hampir semua jenis data yang melewati aplikasi. Ketiga, solusinya harus ramah cloud dan lokal, dengan dukungan untuk arsitektur cloud-native yang sedang berkembang. Keempat, solusi harus kompatibel dengan lingkungan yang ada!
Arsitektur
Perlindungan Data Aplikasi CipherTrust memenuhi janji DevSecOps. Pengembang menikmati ikatan bahasa yang sesuai dengan proyek mereka. Operasi dapat memanfaatkan pilihan di antara Penyedia Layanan Crypto yang berjalan di berbagai sistem operasi. Produk ini mencakup banyak fitur operasional yang meningkatkan kinerja dan ketersediaan untuk memastikan bahwa keamanan memberikan dampak minimal hingga nol pada operasi bisnis. Dan untuk tim keamanan, ia beroperasi dengan CipherTrust Manager, menyediakan arsitektur yang memusatkan kunci enkripsi untuk aplikasi. Pemisahan tugas yang ditingkatkan dilengkapi dengan kontrol granular pada pengguna utama dan penggunaan operasional utama.