Video transcripts

Transcript

1. 0:00Data in use is one of the most difficult states of data to protect.
2. 0:04That's because to be useful,
3. 0:06the data must be in plain text.
4. 0:08It needs to be readable,
5. 0:09writeable,
6. 0:10and accessible by users,
7. 0:12applications or systems.
8. 0:14Whether it is a customer form being updated,
9. 0:16a financial report being edited,
10. 0:18or a medical record being reviewed,
11. 0:20that data is exposed during use.
12. 0:23Data in use is vulnerable to both accidental and intentional threats.
13. 0:28A well-meaning employee might make a mistake that alters values unexpectedly.
14. 0:33On the other hand,
15. 0:34a malicious actor with access could intentionally modify data for personal gain
16. 0:39because the data must be decrypted to be processed.
17. 0:42Traditional encryption methods are not effective in this moment.
18. 0:46One common example of unauthorized exposure is an over the shoulder attack.
19. 0:50This is when someone views another person's screen to
20. 0:53obtain information they are not authorized to access.
21. 0:56In open or shared workspaces,
22. 0:59this threat becomes very real.
23. 1:01One advanced solution is the use of secure enclaves.
24. 1:05These are isolated areas within a computer system
25. 1:07where sensitive data can be processed safely,
26. 1:11even though the data must remain in plain text while being used,
27. 1:14the enclave prevents other parts of the system from accessing or tampering with it.
28. 1:19The term enclave comes from the idea of
29. 1:21a protected area surrounded by a larger territory.
30. 1:25In computing,
31. 1:26this means isolating the processing zone from the rest of the system.
32. 1:30Any malware or vulnerabilities outside the enclave
33. 1:34cannot interfere with what happens inside.
34. 1:37Data in use will always be the most exposed.
35. 1:40However,
36. 1:41with layered defenses like access controls,
37. 1:44real-time auditing,
38. 1:45and secure enclaves,
39. 1:47organizations can protect it responsibly.
40. 1:49The goal is not to eliminate risk completely,
41. 1:52but to reduce it to a manageable level while allowing the data to do its job.