Company
Date Published
Author
Eric Spiegelberg
Word count
1047
Language
English
Hacker News points
None

Summary

Security is a fundamental aspect of modern software development, and Neo4j, as a graph database, requires robust security measures to protect its data. While filesystem encryption can enhance protection, it alone is insufficient due to the REST-based architecture of Neo4j, which responds to Cypher statements in cleartext over the network. Application-layer encryption offers an additional layer of protection by dynamically encrypting and decrypting data at runtime, addressing industry security standards such as HIPPA and FERPA. The Object Graph Mapping (OGM) library provides a straightforward approach to implement application-level security through the use of AttributeConverters, allowing developers to selectively encrypt properties while retaining flexibility for other properties that may not require encryption. However, this approach also incurs computational overhead and may impact system performance, and existing data will need to be transformed into the desired encrypted format. Ultimately, employing the right amount of security is crucial in software development, and Neo4j's OGM library provides a viable solution for securing data on disk and during transmission.