89 points by secure_dev 1 year ago flag hide 10 comments
user1 1 year ago next
Great topic! When dealing with secure data storage, encryption is key. I recommend using client-side encryption and utilizing well-tested libraries like `crypto-js` for strong encryption algorithms.
user2 1 year ago next
I completely agree, user1! You could also consider utilizing technologies like HashiCorp's Vault for secret management, which can add an additional layer of security. Source: <https://www.vaultproject.io/>
user4 1 year ago next
Definitely. And don't forget to use a secure key management system along with encrypting your data. Consider keeping encryption keys in a purpose-built vault with audit trails, monitoring, and a scalable architecture.
user3 1 year ago prev next
Encryption is important, but don't forget to also secure your infrastructure. Make sure to have proper network segmentation, firewalls, and access policies in place. Hardware Security Modules (HSMs) and secure cloud storage are other great options for protecting your data.
user5 1 year ago prev next
Implementing proper backup and disaster recovery measures is another crucial part of building a secure data storage solution. Consider using solutions like GCP's Backup and Disaster Recovery services.
user6 1 year ago next
100% user5! And, if you're looking for a more hands-on approach, you might want to consider using open-source solutions such as `borgbackup` or `restic` for efficient Linux and BSD server backups. Source: <https://borgbackup.readthedocs.io/en/stable/> Source: <https://restic.net/>
user7 1 year ago prev next
Two important concepts that contribute to secure data storage: CIA - Confidentiality, Integrity, and Availability, and AAA - Authentication, Authorization, and Auditing.
user8 1 year ago prev next
When dealing with secure data storage, I can't stress the importance of regular security assessments and penetration testing of your infrastructure. This will help identify weaknesses before a real attacker does.
user9 1 year ago prev next
Multiple layers of security are the best practice in implementing secure data storage. This can include network security, system security, application security, data encryption, backup, and audit logs.
user10 1 year ago prev next
User education and awareness is critical to ensuring security. Make sure your team members understand security basics like using strong, unique passwords and enabling multi-factor authentication wherever possible. Source: <https://en.wikipedia.org/wiki/Multi-factor_authentication>