 |
| For MySQL Data Security & Compliance |
|
| PCI-GENERAL for MySQL, part of Security-GENERAL family of products, is a self-defending MySQL server soft appliance. PCI-GENERAL
stores MySQL data on cryptographically protected space. As a matter of
fact, data never get to the disk or the network unencrypted. This means
that data are protected against equipment theft or physical compromise,
and against network eavesdroppers.
Only
MySQL server application is the authorized to access MySQL data. No other programs,
even if running with administrator privileges can access or modify the data.
Backups
are encrypted by default, by employing the same mechanism that is used
to encrypt the database itself. Thus no special encrypting backup
devices are required.
A
trimmed down operating system running only the essential services is
used to minimize data exposure risk. A smaller number of running
programs reduces the "radar cross-section" of PCI-GENERAL, and
makes it easier to actively monitor those few services for problems.
Role-Based Access Control (RBAC) allows different administrators to manage different aspects of PCI-GENERAL.
Key
management is designed so that the encryption keys are never on
permanent storage. Keys are stored partially on disk and partially on
FIPS-certified, PIN-protected smart cards, and are reconstituted from
these two "shares" when the appliance boots. Thus, a stolen appliance,
or a misplaced disk or backup tape contains no information of use to
the adversary.
“PCI-GENERAL for MySQL” is the most secure soft MySQL server appliance available today.
Feature Highlights:
• A ready-to-install secure PCI compliant secure MySQL soft server appliance
• Transparent MySQL data encryption (AES-256)
• Protection against privileged user's abuse
• Key management - FIPS-140-2 level 3 (Hard tokens)
• Secure web management (RBAC)
• Support for DRBD
• Cryptographically-signed access logs
• Tested security updates
• Support for 64-bit architecture and SMP
|
Highlight:
[Protection Against "root" - Demo]
[How Does PCI-GENERAL Help Achieve Compliance?]
[Key security features of the platform that PCI-GENERAL uses]
[Why Use PCI-GENERAL To Secure MySQL data?]
|
|
|