Microservices architecture is distinguished from the traditional monolithic software architecture, a distributed software architecture system created to accommodate high concurrency, high performance, and high availability. Data security is extremely challenging:
1、The attack surface becomes wider and the risk of attack becomes higher;
2、Multiple security checks may lead to poor performance;
3、Trust between microservices becomes complex;
4、Requests across multiple microservices become more difficult to trace;
5、The invariance of the server, resulting in complex access control policy updates;
6、The distributed nature of microservices, which makes sharing user sessions difficult.
Under the microservice architecture scenario, a corresponding data security solution is proposed through the technical research on new forms of data security:
1. The data security protection capability unit can protect the data call security between containers according to the actual business scenario requirements, and at the same time, the data security protection capability unit can also be deployed in the container environment;
2, micro-service architecture, API as an important data entry point, can use API security audit, application desensitization of API security risk identification, as well as de-privatization of desensitized data;
3、Use database audit, database firewall for risk monitoring and protection, to ensure that only legitimate users or services can access the corresponding data resources;
4、Use the data security comprehensive governance platform to link various data security capability units to form data security situational awareness capabilities.
1、Monitoring and auditing of data access behavior and security protection under microservice architecture scenarios;
2、Micro-service architecture scenario, API interface risk monitoring, and sensitive data protection;
3、Micro-service architecture scenarios, the overall data security situation awareness.
A variety of data security capabilities unit applicable to microservice scenarios under the container environment deployment.
Big data, AI and other technologies are utilized to analyze and mine various data security risks.
The performance and reliability of each data security capability unit is leading to meet the needs of high traffic and reliability requirements under the microservice architecture.
Qianhai Building,Shenzhen,China
Tel：400-622-8990
Email：support@ankki.com
