Cybersecurity policy currently focuses on securing systems, but data remains vulnerable when it is processed or moved. The article argues that encryption fails to protect readable data during active use, leaving sensitive information exposed to theft. A proposed solution called vaultless, keyless pseudonymization replaces sensitive values with realistic substitutes to reduce their value if stolen. This method was assessed by the Foundation for Defense of Democracies, showing it can preserve data format while preventing unauthorized restoration. The authors recommend that the National Institute of Standards and Technology and NSA evaluate this approach for real-world government operations.
Read the full story at cyberscoop.com.
Photo: Pixelkult / Pixabay
