What is Data at Rest?
Data stored in databases, file systems, or storage systems, not actively moving
What is Full Disk Encryption (FDE)?
Encrypts the entire hard drive
What is Partition Encryption?
Encrypts specific partitions, leaving others unencrypted
What is File Encryption?
Encrypts individual files
What is Volume Encryption?
Encrypts selected files or directories
What is Database Encryption?
Encrypts data stored in a database at column, row, or table levels
What is Record Encryption?
Encrypts specific fields within a database record
What is Data in Transit (Data in Motion)?
Data actively moving from one location to another, vulnerable to interception
What are Transport of Encryption Methods?
SSL and TLS, VPN, IPSec
What is SSL (Secure Sockets Layer) and TLS (Transport Layer Security)?
Secure communication over networks, widely used in web browsing and email
What is VPN (Virtual Private Network)?
Creates secure connections over less secure networks like the internet
What is IPSec (Internet Protocol Security)
Secures IP communications by authenticating and encrypting IP packets
What is Data in Use?
Data actively being created, retrieved, updated, or deleted
What is Encryption at the Application Level?
Encrypts data during processing
What are Access Controls?
Restricts access to data during processing
What are Secure Enclaves?
Isolated environments for processing sensitive data
What are Mechanisms like INTEL Software Guard?
Encrypts data in memory to prevent unauthorized access