SYS-CON MEDIA Authors: Liz McMillan, Elizabeth White, Maria C. Horton, Andy Thurai, Zakia Bouachraoui

Blog Feed Post

Latest Security Enhancements in Data Access & Connectivity

We never stop working to upgrade the security of our products—check out new enhancements to Oracle ODBC, Hybrid Data Pipeline and IBM dashDB.

As we move forward into the new year, we recognize that your security concerns didn’t stop in 2017. Security needs are continuously evolving, and we are constantly improving our products to make sure you stay ahead of them. We recently announced a series of security updates to several key products in our Data Connectivity and Integration suite, and this blog summarizes these upgrades so that you can take advantage of the improvements.

At Progress DataDirect, we are constantly updating our connectors’ security so that our partners can continue to rely on us for their data access security needs. This includes veracode scanning with each delivery to ensure data access is secure and free from malicious code or other backdoor threats. Below we’ll break down the security highlights from our recent releases.

Oracle ODBC Driver

We have upgraded our Oracle ODBC 8.0.2 driver with support for Oracle Wallet, Oracle Internet Directory and New Data Integrity Algorithms (SHA – 256, 384, 512).

Details

  • Oracle Wallet: Our driver supports using Oracle Wallet for SSL Authentication and as a keystore or truststore for SSL data encryption
  • Oracle Internet Directory (OID): Our latest driver has also been certified to use Oracle Internet Directory, Oracle’s LDAP compliant directory, as a means to store authentication information
  • New Data Integrity Algorithms: Our Oracle driver has been enhanced to support new data integrity algorithms SHA256, SHA384, SHA512 along with MD5 and SHA1

Hybrid Data Pipeline

Hybrid Data Pipeline (HDP), our lightweight, embeddable data access service that simplifies integration by connecting directly to data via ODBC, JDBC or OData (REST), has received several key improvements with the upgrade to Hybrid Data Pipeline 4.2.1.

Details

  • External Authentication: HDP now supports external authentication protocols such as LDAP, OAuth and other identity and access management products, via a Java plugin
  • FIPS and FEDRAMP Enhancements: The HDP server now offers a configuration where it can be run in FIPS 140-2 compliant mode. Also, the HDP account lockout policy will be enabled by default in accordance with Federal Risk and Authorization Management Program (FedRAMP) low- and medium-risk guidelines. Both these enhancements make Hybrid Data Pipeline easier to adopt for US Government entities.

IBM dashDB

Now called IBM Db2 Warehouse on the Cloud, IBM dashDB provides data warehousing and analytics as a service. Progress DataDirect offers high-performing ODBC, JDBC and OData connectors for dashDB.

Details

  • ODBC: The ODBC driver is based on the DB2 Wire Protocol. Our driver includes enterprise ready features such as SSL/TLS encryption, connection pooling, and SQL up-leveling
  • JDBC: Our driver for JDBC now offers High-Availability, Bulk Load, SSL/TLS encryption, SQL Up Leveling, support for Kerberos and other advanced features
  • OData: We also offer OData-based REST API for data access with IBM dashDB. OData is an ISO approved OASIS standard for REST API that can be used from modern programming languages, mobile clients and also applications such as Salesforce, Power BI and Tableau. Learn more about OData.

Keeping Your Data Secure

We’ll continue to work tirelessly throughout 2018 (and beyond) to make accessing your data both easy and secure, no matter where it is being housed. Learn more about our data connectivity solutions and all our recent releases.

As always, we welcome you to contact us if you have any security questions.

Contact Us

Read the original blog entry...

More Stories By Progress Blog

Progress offers the leading platform for developing and deploying mission-critical, cognitive-first business applications powered by machine learning and predictive analytics.

Latest Stories
The Software Defined Data Center (SDDC), which enables organizations to seamlessly run in a hybrid cloud model (public + private cloud), is here to stay. IDC estimates that the software-defined networking market will be valued at $3.7 billion by 2016. Security is a key component and benefit of the SDDC, and offers an opportunity to build security 'from the ground up' and weave it into the environment from day one. In his session at 16th Cloud Expo, Reuven Harrison, CTO and Co-Founder of Tufin, ...
Historically, some banking activities such as trading have been relying heavily on analytics and cutting edge algorithmic tools. The coming of age of powerful data analytics solutions combined with the development of intelligent algorithms have created new opportunities for financial institutions. In his session at 20th Cloud Expo, Sebastien Meunier, Head of Digital for North America at Chappuis Halder & Co., discussed how these tools can be leveraged to develop a lasting competitive advantage ...
While the focus and objectives of IoT initiatives are many and diverse, they all share a few common attributes, and one of those is the network. Commonly, that network includes the Internet, over which there isn't any real control for performance and availability. Or is there? The current state of the art for Big Data analytics, as applied to network telemetry, offers new opportunities for improving and assuring operational integrity. In his session at @ThingsExpo, Jim Frey, Vice President of S...
"We were founded in 2003 and the way we were founded was about good backup and good disaster recovery for our clients, and for the last 20 years we've been pretty consistent with that," noted Marc Malafronte, Territory Manager at StorageCraft, in this SYS-CON.tv interview at 20th Cloud Expo, held June 6-8, 2017, at the Javits Center in New York City, NY.
DevOps is often described as a combination of technology and culture. Without both, DevOps isn't complete. However, applying the culture to outdated technology is a recipe for disaster; as response times grow and connections between teams are delayed by technology, the culture will die. A Nutanix Enterprise Cloud has many benefits that provide the needed base for a true DevOps paradigm. In their Day 3 Keynote at 20th Cloud Expo, Chris Brown, a Solutions Marketing Manager at Nutanix, and Mark Lav...
In his keynote at 18th Cloud Expo, Andrew Keys, Co-Founder of ConsenSys Enterprise, provided an overview of the evolution of the Internet and the Database and the future of their combination – the Blockchain. Andrew Keys is Co-Founder of ConsenSys Enterprise. He comes to ConsenSys Enterprise with capital markets, technology and entrepreneurial experience. Previously, he worked for UBS investment bank in equities analysis. Later, he was responsible for the creation and distribution of life settl...
"At the keynote this morning we spoke about the value proposition of Nutanix, of having a DevOps culture and a mindset, and the business outcomes of achieving agility and scale, which everybody here is trying to accomplish," noted Mark Lavi, DevOps Solution Architect at Nutanix, in this SYS-CON.tv interview at @DevOpsSummit at 20th Cloud Expo, held June 6-8, 2017, at the Javits Center in New York City, NY.
According to the IDC InfoBrief, Sponsored by Nutanix, “Surviving and Thriving in a Multi-cloud World,” multicloud deployments are now the norm for enterprise organizations – less than 30% of customers report using single cloud environments. Most customers leverage different cloud platforms across multiple service providers. The interoperability of data and applications between these varied cloud environments is growing in importance and yet access to hybrid cloud capabilities where a single appl...
@CloudEXPO and @ExpoDX, two of the most influential technology events in the world, have hosted hundreds of sponsors and exhibitors since our launch 10 years ago. @CloudEXPO and @ExpoDX New York and Silicon Valley provide a full year of face-to-face marketing opportunities for your company. Each sponsorship and exhibit package comes with pre and post-show marketing programs. By sponsoring and exhibiting in New York and Silicon Valley, you reach a full complement of decision makers and buyers in ...
In today's always-on world, customer expectations have changed. Competitive differentiation is delivered through rapid software innovations, the ability to respond to issues quickly and by releasing high-quality code with minimal interruptions. DevOps isn't some far off goal; it's methodologies and practices are a response to this demand. The demand to go faster. The demand for more uptime. The demand to innovate. In this keynote, we will cover the Nutanix Developer Stack. Built from the foundat...
"Cloud computing is certainly changing how people consume storage, how they use it, and what they use it for. It's also making people rethink how they architect their environment," stated Brad Winett, Senior Technologist for DDN Storage, in this SYS-CON.tv interview at 20th Cloud Expo, held June 6-8, 2017, at the Javits Center in New York City, NY.
Sold by Nutanix, Nutanix Mine with Veeam can be deployed in minutes and simplifies the full lifecycle of data backup operations, including on-going management, scaling and troubleshooting. The offering combines highly-efficient storage working in concert with Veeam Backup and Replication, helping customers achieve comprehensive data protection for all their workloads — virtual, physical and private cloud —to meet increasing business demands for uptime and productivity.
Two weeks ago (November 3-5), I attended the Cloud Expo Silicon Valley as a speaker, where I presented on the security and privacy due diligence requirements for cloud solutions. Cloud security is a topical issue for every CIO, CISO, and technology buyer. Decision-makers are always looking for insights on how to mitigate the security risks of implementing and using cloud solutions. Based on the presentation topics covered at the conference, as well as the general discussions heard between sessio...
"NetApp's vision is how we help organizations manage data - delivering the right data in the right place, in the right time, to the people who need it, and doing it agnostic to what the platform is," explained Josh Atwell, Developer Advocate for NetApp, in this SYS-CON.tv interview at 20th Cloud Expo, held June 6-8, 2017, at the Javits Center in New York City, NY.
A look across the tech landscape at the disruptive technologies that are increasing in prominence and speculate as to which will be most impactful for communications – namely, AI and Cloud Computing. In his session at 20th Cloud Expo, Curtis Peterson, VP of Operations at RingCentral, highlighted the current challenges of these transformative technologies and shared strategies for preparing your organization for these changes. This “view from the top” outlined the latest trends and developments i...