Welcome!

Blog Feed Post

Latest Security Enhancements in Data Access & Connectivity

We never stop working to upgrade the security of our products—check out new enhancements to Oracle ODBC, Hybrid Data Pipeline and IBM dashDB.

As we move forward into the new year, we recognize that your security concerns didn’t stop in 2017. Security needs are continuously evolving, and we are constantly improving our products to make sure you stay ahead of them. We recently announced a series of security updates to several key products in our Data Connectivity and Integration suite, and this blog summarizes these upgrades so that you can take advantage of the improvements.

At Progress DataDirect, we are constantly updating our connectors’ security so that our partners can continue to rely on us for their data access security needs. This includes veracode scanning with each delivery to ensure data access is secure and free from malicious code or other backdoor threats. Below we’ll break down the security highlights from our recent releases.

Oracle ODBC Driver

We have upgraded our Oracle ODBC 8.0.2 driver with support for Oracle Wallet, Oracle Internet Directory and New Data Integrity Algorithms (SHA – 256, 384, 512).

Details

  • Oracle Wallet: Our driver supports using Oracle Wallet for SSL Authentication and as a keystore or truststore for SSL data encryption
  • Oracle Internet Directory (OID): Our latest driver has also been certified to use Oracle Internet Directory, Oracle’s LDAP compliant directory, as a means to store authentication information
  • New Data Integrity Algorithms: Our Oracle driver has been enhanced to support new data integrity algorithms SHA256, SHA384, SHA512 along with MD5 and SHA1

Hybrid Data Pipeline

Hybrid Data Pipeline (HDP), our lightweight, embeddable data access service that simplifies integration by connecting directly to data via ODBC, JDBC or OData (REST), has received several key improvements with the upgrade to Hybrid Data Pipeline 4.2.1.

Details

  • External Authentication: HDP now supports external authentication protocols such as LDAP, OAuth and other identity and access management products, via a Java plugin
  • FIPS and FEDRAMP Enhancements: The HDP server now offers a configuration where it can be run in FIPS 140-2 compliant mode. Also, the HDP account lockout policy will be enabled by default in accordance with Federal Risk and Authorization Management Program (FedRAMP) low- and medium-risk guidelines. Both these enhancements make Hybrid Data Pipeline easier to adopt for US Government entities.

IBM dashDB

Now called IBM Db2 Warehouse on the Cloud, IBM dashDB provides data warehousing and analytics as a service. Progress DataDirect offers high-performing ODBC, JDBC and OData connectors for dashDB.

Details

  • ODBC: The ODBC driver is based on the DB2 Wire Protocol. Our driver includes enterprise ready features such as SSL/TLS encryption, connection pooling, and SQL up-leveling
  • JDBC: Our driver for JDBC now offers High-Availability, Bulk Load, SSL/TLS encryption, SQL Up Leveling, support for Kerberos and other advanced features
  • OData: We also offer OData-based REST API for data access with IBM dashDB. OData is an ISO approved OASIS standard for REST API that can be used from modern programming languages, mobile clients and also applications such as Salesforce, Power BI and Tableau. Learn more about OData.

Keeping Your Data Secure

We’ll continue to work tirelessly throughout 2018 (and beyond) to make accessing your data both easy and secure, no matter where it is being housed. Learn more about our data connectivity solutions and all our recent releases.

As always, we welcome you to contact us if you have any security questions.

Contact Us

Read the original blog entry...

More Stories By Progress Blog

Progress offers the leading platform for developing and deploying mission-critical, cognitive-first business applications powered by machine learning and predictive analytics.

Latest Stories
A strange thing is happening along the way to the Internet of Things, namely far too many devices to work with and manage. It has become clear that we'll need much higher efficiency user experiences that can allow us to more easily and scalably work with the thousands of devices that will soon be in each of our lives. Enter the conversational interface revolution, combining bots we can literally talk with, gesture to, and even direct with our thoughts, with embedded artificial intelligence, whic...
The question before companies today is not whether to become intelligent, it’s a question of how and how fast. The key is to adopt and deploy an intelligent application strategy while simultaneously preparing to scale that intelligence. In her session at 21st Cloud Expo, Sangeeta Chakraborty, Chief Customer Officer at Ayasdi, provided a tactical framework to become a truly intelligent enterprise, including how to identify the right applications for AI, how to build a Center of Excellence to oper...
Sometimes I write a blog just to formulate and organize a point of view, and I think it’s time that I pull together the bounty of excellent information about Machine Learning. This is a topic with which business leaders must become comfortable, especially tomorrow’s business leaders (tip for my next semester University of San Francisco business students!). Machine learning is a key capability that will help organizations drive optimization and monetization opportunities, and there have been some...
While some developers care passionately about how data centers and clouds are architected, for most, it is only the end result that matters. To the majority of companies, technology exists to solve a business problem, and only delivers value when it is solving that problem. 2017 brings the mainstream adoption of containers for production workloads. In his session at 21st Cloud Expo, Ben McCormack, VP of Operations at Evernote, discussed how data centers of the future will be managed, how the p...
"Storpool does only block-level storage so we do one thing extremely well. The growth in data is what drives the move to software-defined technologies in general and software-defined storage," explained Boyan Ivanov, CEO and co-founder at StorPool, in this SYS-CON.tv interview at 16th Cloud Expo, held June 9-11, 2015, at the Javits Center in New York City.
ChatOps is an emerging topic that has led to the wide availability of integrations between group chat and various other tools/platforms. Currently, HipChat is an extremely powerful collaboration platform due to the various ChatOps integrations that are available. However, DevOps automation can involve orchestration and complex workflows. In his session at @DevOpsSummit at 20th Cloud Expo, Himanshu Chhetri, CTO at Addteq, will cover practical examples and use cases such as self-provisioning infra...
As DevOps methodologies expand their reach across the enterprise, organizations face the daunting challenge of adapting related cloud strategies to ensure optimal alignment, from managing complexity to ensuring proper governance. How can culture, automation, legacy apps and even budget be reexamined to enable this ongoing shift within the modern software factory? In her Day 2 Keynote at @DevOpsSummit at 21st Cloud Expo, Aruna Ravichandran, VP, DevOps Solutions Marketing, CA Technologies, was jo...
As Marc Andreessen says software is eating the world. Everything is rapidly moving toward being software-defined – from our phones and cars through our washing machines to the datacenter. However, there are larger challenges when implementing software defined on a larger scale - when building software defined infrastructure. In his session at 16th Cloud Expo, Boyan Ivanov, CEO of StorPool, provided some practical insights on what, how and why when implementing "software-defined" in the datacent...
Blockchain. A day doesn’t seem to go by without seeing articles and discussions about the technology. According to PwC executive Seamus Cushley, approximately $1.4B has been invested in blockchain just last year. In Gartner’s recent hype cycle for emerging technologies, blockchain is approaching the peak. It is considered by Gartner as one of the ‘Key platform-enabling technologies to track.’ While there is a lot of ‘hype vs reality’ discussions going on, there is no arguing that blockchain is b...
Blockchain is a shared, secure record of exchange that establishes trust, accountability and transparency across business networks. Supported by the Linux Foundation's open source, open-standards based Hyperledger Project, Blockchain has the potential to improve regulatory compliance, reduce cost as well as advance trade. Are you curious about how Blockchain is built for business? In her session at 21st Cloud Expo, René Bostic, Technical VP of the IBM Cloud Unit in North America, discussed the b...
You know you need the cloud, but you’re hesitant to simply dump everything at Amazon since you know that not all workloads are suitable for cloud. You know that you want the kind of ease of use and scalability that you get with public cloud, but your applications are architected in a way that makes the public cloud a non-starter. You’re looking at private cloud solutions based on hyperconverged infrastructure, but you’re concerned with the limits inherent in those technologies.
Is advanced scheduling in Kubernetes achievable?Yes, however, how do you properly accommodate every real-life scenario that a Kubernetes user might encounter? How do you leverage advanced scheduling techniques to shape and describe each scenario in easy-to-use rules and configurations? In his session at @DevOpsSummit at 21st Cloud Expo, Oleg Chunikhin, CTO at Kublr, answered these questions and demonstrated techniques for implementing advanced scheduling. For example, using spot instances and co...
The cloud era has reached the stage where it is no longer a question of whether a company should migrate, but when. Enterprises have embraced the outsourcing of where their various applications are stored and who manages them, saving significant investment along the way. Plus, the cloud has become a defining competitive edge. Companies that fail to successfully adapt risk failure. The media, of course, continues to extol the virtues of the cloud, including how easy it is to get there. Migrating...
The use of containers by developers -- and now increasingly IT operators -- has grown from infatuation to deep and abiding love. But as with any long-term affair, the honeymoon soon leads to needing to live well together ... and maybe even getting some relationship help along the way. And so it goes with container orchestration and automation solutions, which are rapidly emerging as the means to maintain the bliss between rapid container adoption and broad container use among multiple cloud host...
Imagine if you will, a retail floor so densely packed with sensors that they can pick up the movements of insects scurrying across a store aisle. Or a component of a piece of factory equipment so well-instrumented that its digital twin provides resolution down to the micrometer.