OWASP VaultDB Project

• Main
• Project About
• Main

VaultDB is a secure NoSQL database management system (DBMS) for modern applications. It supports multi-recipient encryption, table-level encryption, group encryption and comes loaded with a strong cryptosystem.

• Formerly known as Scytale

OWASP VaultDB Project VaultDB is an encrypted persistent key-value store with a multi-recipient cryptosystem for LAMP (Linux, Apache, MySQL, PHP) based web applications. Introduction This framework provide everything you need for storing encrypted key-value documents inside a custom MySQL database. VaultDB also comes with a secure user login and authentication mechanism designed to avoid common security and cryptographic pitfalls. Description VaultDB adds automatic transparent encryption to your application's data at the table/document level. Instead of using it's own internal storage engine, VaultDB stores the encrypted data inside a custom MySQL database for storage. It's design is made to provide developers with a solid method for integrating strong cryptography inside web applications and secure data using NoSQL-like transactions. Licensing OWASP VaultDB is free to use. It is licensed under the BSD license, so you can copy, distribute and transmit the work, and you can adapt it, and use it commercially, but all provided that you attribute the work and if you alter, transform, or build upon this work, you may distribute the resulting work only under the same license to this one.

What is VaultDB? OWASP VaultDB can protect your application from 4 out of 10 critical security risks in the OWASP Top Ten Most Critical Web Application Security Risks from OWASP_Top_Ten_Project. A1 Injection A2 Broken Authentication and Session Management (was formerly A3) A5 Security Misconfiguration (was formerly A6) A6 Sensitive Data Exposure (merged from former A7 Insecure Cryptographic Storage and former A9 Insufficient Transport Layer Protection) Project Leader Project leader's is Maxime Labelle (maxime.labelle@owasp.org) Related Projects OWASP_CISO_Survey

Quick Download Download from github Official web site News and Events [30 Jan 2014] New release out Documentation You can view the online documentation here Classifications