Acra (software)
| Developer(s) | Cossack Labs |
|---|---|
| Initial release | 7 March 2017 |
| Repository | https://github.com/cossacklabs/acra |
| Written in | Go, other supported languages/platforms: Java, Go, Python, PHP, Node.js, Objective-C, Swift |
| Engine | |
| Operating system | server OS: CentOS, Debian, Ubuntu, RHEL; application OS: Windows, Linux (x86/ARM), mobile (Android, iOS) |
| Type | Database security |
| License | Apache 2.0 |
| Website | www |
Search Acra (software) on Amazon.
Acra (English pronunciation: [ˈa.kra]) from Ancient Greek ἀ̆κρᾰ (akra), a castle or citadel overlooking a town) is an open-source database security suite used for sensitive and personal data protection in web and mobile apps with centralised data storage.[1][2]
Acra was designed to prevent data leakage risks in healthcare, finance, e-commerce, and critical infrastructures by encrypting data, detecting of unauthorised behavior, and informing operators of the incident underway.[3]
Acra provides field level encryption, when each piece of data is encrypted with unique keys. Acra supports three form-factors: client-side encryption (developers install AcraWriter SDK to their applications and encrypt data in the app), “transparent” encryption (Acra works as reverse-proxy for SQL databases, encrypting and decrypting data between application and database) or as REST API server.[4] As reverse-proxy, Acra works with SQL-compatible databases, like MySQL, PostgreSQL, MariaDB, Google Cloud SQL, Amazon RDS.[5]
Open-source Acra uses AES-256-GCM and ECDH for storage encryption, and OpenSSL as cryptographic engine.[6] Expect field-level encryption, Acra provides searchable encryption (search through encrypted data), data masking (anonymization), data tokenization (pseudonymization), SQL database firewall and intrusion detection via honey token (“poison records”).[4]
Acra Searchable Encryption (Acra SE) is a solution implemented in Acra for search in encrypted data based on the blind indexing approach. It develops and evolves the original idea of the CipherSweet[7] project, is described in a whitepaper authored by Eugene Pilyankevich, Dmytro Kornieiev, and Artem Storozhuk.[8]
Acra was built in 2017[9] based on the high-level cryptographic library Themis, also developed by the British infosec company Cossack Labs.[10] The latest stable release of Acra 0.85.0 was published in March 2019,[11] the latest commit in master branch is dated November 2020.[12]
Acra Community Edition is free for commercial and non-commercial use.[13] Acra encryption suite is available as 1-Click App on DigitalOcean Marketplace[14] also free of charge. Acra has separate, proprietary, and closed-source, Enterprise Edition with a wider number of available features and integrations.[15]
In 2020, in the Hacker Noon Noonies contest, Acra was awarded 1st place medal as a Best Open Source Project[16] and 2nd place medal as Best Use of Tech for Good.[17]
References[edit]
- ↑ "What is Acra". Acra on Github.
- ↑ "Acra. Linux Security. Tool and Usage". Linux Security.
- ↑ "Acra security features". Acra on Github.
- ↑ 4.0 4.1 "Acra. Product sheet" (PDF). Cossack Labs.
- ↑ "Acra compatibility and intergation". Acra of Github.
- ↑ "Cryptography in Acra". Cossack Labs.
- ↑ "CipherSweet project". Github.
- ↑ Eugene Pilyankevich, Dmytro Kornieiev, and Artem Storozhuk. "Proxy-Mediated Searchable Encryption in SQL Databases Using Blind Indexes". Cryptology ePrint Archive.CS1 maint: Multiple names: authors list (link)
- ↑ "INTRODUCING ACRA – An Open Source Database Security Suite". IS Buzz. Retrieved 2017-03-16.
- ↑ "Cryptography in Acra". Cossack Labs on Github.
- ↑ "Acra releases". Acra on Github.
- ↑ "Acra latest update". Acra on Github.
- ↑ "Acra database security suite". Cossack Labs.
- ↑ "Acra 1-Click App on Digital Ocean Marketplace". Digital Ocean.
- ↑ "Acra plans". Cossack Labs.
- ↑ "Best Open Source Project, 2020". Hacker Noon Noonies.
- ↑ "Best Use of Tech for Good, 2020". Hacker Noon Noonies.
This article "Acra (software)" is from Wikipedia. The list of its authors can be seen in its historical and/or the page Edithistory:Acra (software). Articles copied from Draft Namespace on Wikipedia could be seen on the Draft Namespace of Wikipedia and not main one.
