SYDO - Secure Your Data by Obscurity
Download as PPT, PDF0 likes497 views
SYDO is a tool that aims to protect data stored in SQL databases from threats like SQL injection, server hijacking, and data theft. It works by encrypting data using AES 128 keys that are stored remotely in a SYDO Hash Center. When a SQL query is made, SYDO generates an identification key stub to identify the query in a way that prevents SQL injection. Data is then encrypted and decrypted through a RESTful encrypted API between the client and the SYDO Hash Center. The tool provides features like support for multiple SQL interfaces and databases, API statistics, and management of multiple websites through the centralized Hash Center.
SYDO - Secure Your Data by Obscurity
- 1. SYDO – Secure Your Data by Obscurity Andrei Avădănei Web Developer, Security enthusiast, Blogger www.worldit.info @AndreiAvadanei +AndreiAvadanei
- 2. Let's make some research :-)
- 3. Before that, what problems do we have? mistrust in hosting provider aims security problems data stealing using SQL Injections … or after server was hijacked etc. etc.
- 4. “ Information” one the most dangerous weapons you have it, you rule ...money, women and finally the world take a look at Google, Facebook, M$ etc.
- 5. We should be more careful!
- 6. But we are lazy...
- 7. We introduce SYDO aims to protect your data stored in SQL databases a built-in interface for SQL functions based on client/server API help you to store and manage your data
- 9. The problem divided in layers Low Level processing (SQL Interfaces) SYDO Medium Level processing (here we can add patches over SQL queries) High-level processing (WAFs, htaccess etc.) Post-processing (client side)
- 10. Solution data (rows/tables/databases) encrypted with AES 128 keys stored in SYDO Hash Center (remote - server) unique identification key + AES keys related SQL Query identification by generating a key stub(Anti-SQLI) RESTful encrypted API protocol between Client and server
- 11. Demo
- 12. Features support over multiple SQL interfaces API statistics multiple website management for SYDO Hash Center P2P Hash Center Service (lower latency) cache over SYDO Hash Center (even lower latency) Anti-DOS for SYDO Hash Center
- 13. Project Status available on GitHub v.01 Alpha http://bit.ly/o6qzjn soon update!
- 14. Important SYDO is not bullet proof but is a better solution!
- 15. Questions?