That's a very strong security claim. What's behind it?
ZeroDB (YC S16) Provides Security for Enterprise Big Data in the Cloud
21–30 of 38 posts
Re: ZeroDB (YC S16) Provides Security for Enterprise Big Data in the Cloud
#22The biggest technical hurdle for this type of database right now is index lookup. Since the nodes on the indexes are encrypted the client/server requires a round trip for every binary tree index level that needs to be traversed. This makes what is usually one of the fastest database operations into a slow one.
This is indeed true for our standalone, open source database ( https://github.com/zerodb/zerodb ). However, it is not the case for our Hadoop scheme (nor our future support for structured database). In these cases, there is no round-tripping required. In fact, it's significantly more performant than existing Transparent Data Encryption in Hadoop, from both a latency and key rotation perspective. We'll likely release…
You've done it Pied Piper! Don't let that nasty Hooli find out how.
Re: ZeroDB (YC S16) Provides Security for Enterprise Big Data in the Cloud
#23Off-topic: whenever I see (YC ) in a title I always assume it's a job posting and automatically ignore it. Might be detrimental to label a blog post appear that way.
Plus one
Re: ZeroDB (YC S16) Provides Security for Enterprise Big Data in the Cloud
#24The biggest technical hurdle for this type of database right now is index lookup. Since the nodes on the indexes are encrypted the client/server requires a round trip for every binary tree index level that needs to be traversed. This makes what is usually one of the fastest database operations into a slow one.
This is indeed true for our standalone, open source database ( https://github.com/zerodb/zerodb ). However, it is not the case for our Hadoop scheme (nor our future support for structured database). In these cases, there is no round-tripping required. In fact, it's significantly more performant than existing Transparent Data Encryption in Hadoop, from both a latency and key rotation perspective. We'll likely release…
Having worked on a similar product and heard a very similar description of the 'proprietary' method, I'm guessing either security, speed or both are actually compromised.
Re: ZeroDB (YC S16) Provides Security for Enterprise Big Data in the Cloud
#25Hey HN, cofounder of ZeroDB here. Michael (/u/michwill) and I are excited to be a part of YC and happy to answer any questions about the company!
Love the idea behind ZeroDB - kudos to you guys, and cheers from a fellow Tar Heel! What's your expansion strategy for Oracle/DB2/MySQL?
We have ideas how to make relational databases secure while running everything server-side, thanks to recent research publications [notably CipherBase from Microsoft Research http://www.cidrdb.org/cidr2013/Papers/CIDR13_Paper33.pdf] and advances in CPU hardware. Early days, but we'll probably test it first in the open source ZeroDB database [https://opensource.zerodb.com] and then apply the same method to existing relational databases.
Re: ZeroDB (YC S16) Provides Security for Enterprise Big Data in the Cloud
#26[deleted]
Re: ZeroDB (YC S16) Provides Security for Enterprise Big Data in the Cloud
#27Microsoft offers "Always Encrypted" for Query Processing over encrypted data in SQL Server and SQL Azure : https://msdn.microsoft.com/en-us/library/mt163865.aspx (Disclaimer : Microsoft Employee)
Re: ZeroDB (YC S16) Provides Security for Enterprise Big Data in the Cloud
#28CryptDb offers DB querying without having to load certain parts of the db to your local machine, which is the model of operation by zeroDb in its current incarnation.
Which is more secure? Does zeroDb use non deterministic encryption?
Re: ZeroDB (YC S16) Provides Security for Enterprise Big Data in the Cloud
#29Hey HN, cofounder of ZeroDB here. Michael (/u/michwill) and I are excited to be a part of YC and happy to answer any questions about the company!
If the consuming application (and thus, keys) exist in the cloud as well, does ZeroDB offer any additional benefit over other encrypted at rest dbs?
random ex: https://docs.mongodb.com/manual/core/security-encryption-at-...
Re: ZeroDB (YC S16) Provides Security for Enterprise Big Data in the Cloud
#30Microsoft offers "Always Encrypted" for Query Processing over encrypted data in SQL Server and SQL Azure : https://msdn.microsoft.com/en-us/library/mt163865.aspx (Disclaimer : Microsoft Employee)
Does Microsoft use deterministic encryption for searchable encryption? I'm sure OPE, Pallier etc. schemes are in use for columns that require those properties