trademark

2.0
Security Best Practices for Non-
Relational Data Stores
Non-relational data stores such as NoSQL databases typically have very few robust security
aspects embedded in them. Solutions to NoSQL injection attacks are not yet completely
mature. With these limitations in mind, the following suggestions are the best techniques to
incorporate while considering security aspects for non-relational data stores.
2.1 Protect Passwords
2.1.1 Why?
To ensure privacy.
2.1.2 How?
• By encryption or hashing using secure hashing algorithms.
• Use cryptographic hashing algorithms functions such as SHA2 (SHA-256 or higher) and
SHA3.
• When hashing, use salt to counter offline, brute-force attacks.
2.2 Safeguard data by data encryption while at rest
2.2.1 Why?
To reliably protect data in spite of weak authentication and authorization techniques
applied.
2.2.2 How?
Use strong encryption methods such as the Advanced Encryption Standard (AES), RSA,
and Secure Hash Algorithm 2 (SHA-256). The storage of code and encryption keys must
be separate from the data storage or repository. The encryption keys should be backed
up in an offline, secured location.
CLOUD SECURITY ALLIANCE Big Data Working Group Guidance
© Copyright 2016, Cloud Security Alliance. All rights reserved.
13