Securing Sensitive Data with CipherTrust

1. https://cpl.thalesgroup.com
THALES INTERNAL USE ONLY
Facilitating Neo4j Graph
Database for the Enterprise
Securing Sensitive Data with CipherTrust
Transparent Encryption
Alex Hanway - Business Development Director, THALES

2. 2
This document may not be reproduced, modified, adapted, published,
translated, in any way, in whole or in part, or disclosed to a third party
without prior written consent of Thales - Thales © 2017 All rights reserved.
THALES INTERNAL USE ONLY
About Thales Group

3. 3
This document may not be reproduced, modified, adapted, published,
translated, in any way, in whole or in part, or disclosed to a third party
without prior written consent of Thales - Thales © 2017 All rights reserved.
THALES INTERNAL USE ONLY
Thales Group Focuses on Intelligent Systems
Hardware
Security Modules
Advanced
Defense Systems
In-flight
Entertainment
Space
Solutions
Rail Signaling
and Supervision
Flight
Avionics

4. 4
This document may not be reproduced, modified, adapted, published,
translated, in any way, in whole or in part, or disclosed to a third party
without prior written consent of Thales - Thales © 2017 All rights reserved.
THALES INTERNAL USE ONLY
The Cloud Protection & Licensing (CPL) Business Line
Thales
Business
Groups
New Digital Identity & Security
Global Business Unit
New
Cloud Protection & Licensing
Business Line

5. 5
This document may not be reproduced, modified, adapted, published,
translated, in any way, in whole or in part, or disclosed to a third party
without prior written consent of Thales - Thales © 2017 All rights reserved.
THALES INTERNAL USE ONLY
Enterprise Challenges to Database Adoption
Sensitive data needs security
Must control for privileged
insider risk
Compliance!!! Cloud Complexity

6. 6
This document may not be reproduced, modified, adapted, published,
translated, in any way, in whole or in part, or disclosed to a third party
without prior written consent of Thales - Thales © 2017 All rights reserved.
THALES INTERNAL USE ONLY
Thales’ CipherTrust Transparent Encryption
(CTE) secures sensitive Neo4j data from
hackers, unauthorized admins, and lawful
subpoenas to a customer’s cloud hosting
provider.
How?
▌ File system level encryption secures data at rest
▌ Customers control their own encryption keys
▌ No need to re-architect databases, applications,
or storage networks
Problem Solved! Encryption for Neo4j Graph Database: CTE Overview
6

7. 7
This document may not be reproduced, modified, adapted, published,
translated, in any way, in whole or in part, or disclosed to a third party
without prior written consent of Thales - Thales © 2017 All rights reserved.
THALES INTERNAL USE ONLY
Transparently Protects File Systems & Volume Data-at-Rest
▌Details
Addresses compliance obligations
Access controls protect privileged users from
accessing data
No need to update GQL
External key management in FIPS 140-2 Level 3
certified options
Detailed, actionable security event logs

8. 8
This document may not be reproduced, modified, adapted, published,
translated, in any way, in whole or in part, or disclosed to a third party
without prior written consent of Thales - Thales © 2017 All rights reserved.
THALES INTERNAL USE ONLY
Use Case – Large Financial Institution
An multinational investment bank headquartered in New York City. This
customer is among the top 10 largest banks in the world with trillions of
dollars in assets.
The Solution
▌ CipherTrust Transparent Encryption &
CipherTrust Manager
The Result
▌ Were able to fully deploy in production
▌ Fully integrated Neo4j into their existing
security strategy
▌ Looking to expand the scope of their Neo4j
investments
The Situation
▌ The customer was looking to deploy Neo4j to
feed data into a variety of applications
▌ This was regulated data that contained
sensitive customer information so deployment
wasn’t possible until security was resolved
▌ And, the security team didn’t want to add to
complexity to their administrative
responsibilities

9. 9
This document may not be reproduced, modified, adapted, published,
translated, in any way, in whole or in part, or disclosed to a third party
without prior written consent of Thales - Thales © 2017 All rights reserved.
THALES INTERNAL USE ONLY
Security
- Greater data security,
and control
- Address privileged
insider risk
- Logging and
monitoring tools for
greater visibility
Compliance
- FIPS 140 level 3
validation critical to
regulated organizations
- Separate encryption
duties and policies with
minimal effort
Scalability
- Encrypt with
negligible impact
- Use in deployments
with large data sets on
premises or in the cloud
Benefits – Neo4j/Thales CTE

10. 10
This document may not be reproduced, modified, adapted, published,
translated, in any way, in whole or in part, or disclosed to a third party
without prior written consent of Thales - Thales © 2017 All rights reserved.
THALES INTERNAL USE ONLY
For more information…
Thales partner page: https://neo4j.com/users/thales/
Thales CPL: https://cpl.thalesgroup.com/

11. https://cpl.thalesgroup.com
THALES INTERNAL USE ONLY
Thank you!
Alexander.Hanway@thalesgroup.com