Enterprise search platforms maintain internal indices of terms and properties of each indexed document in plaintext. This enables both retrieval of relevant content and the presentation of the results list.
These indices contain sufficient enough information about your data for a hacker to reconstruct highly confidential documents, including Personally Identifiable Information (PII) and Protected Health Information (PHI), which are subject to regulatory mandates.
In addition, because search indices are stored in plaintext, hosting enterprise search platforms in the cloud exposes companies to even larger risks.
A readily available free tool in the hands of a rogue search administrator or hacker is all that is needed for a devastating data breach.
To prevent the risk of a data breach from the search indices, Credeon SFS delivers searchable encryption technology which allows the search process to be carried out directly on encrypted data. Specifically, Credeon:
Credeon uses an AES 256 cryptographic module (FIPS 140-2 certified) and a probabilistic encryption scheme using 128-bit randomization process, so when encrypting the same texts, the ciphertext is different every time.
This process makes the encrypted data resistant to advanced statistical attacks and virtually eliminates the risk of the plaintext being derived from the ciphertext.
Search through 10GB Wikipedia data
19ms vs. 16ms
*Results of internal test with full optimization.
The combination of homomorphic functions and a symmetric-key encryption scheme achieves a real-time encrypted search with an average of just 15 percent+* overhead compared to a regular search.
Not all data may require the highest level of security. With Credeon, you can choose to encrypt some or all of the fields.
Supports Credeon Key Management Server and Java KeyStore (JKS) for authenticating and managing encryption keys.
Credeon plugin can be installed with simple configuration settings. Solr/Elasticsearch RESTful API remains untouched.
Credeon is installed for each Solr/Elasticsearch instance and works across clustered nodes.
Contact us to start a free evaluation for Apache Solr and Elasticsearch. Only the plugin is provided, so a Linux or Windows testing environment must be prepared in advance.
Ready to buy? Contact us.
Better yet, check out Credeon SFS on Microsoft Azure Marketplace and start testing in a matter of minutes. The basic settings are preconfigured.
Or, talk to our friendly Solr expert partner at Measured Search. They can help accelerate your project delivery.