Eliminate unwanted exposure with data encryption

MuleSoft offers the world’s most widely used open source enterprise service bus - Mule as an ESB. Being a lightweight platform, it is flexible while still being robust and powerful. Mule is capable of supporting even the most demanding processes with its immense scalability and reliability. Most importantly, Mule as an ESB makes connecting on-premises and cloud applications and services easy, taking the pain out of integration.

Communication between various systems - on-premises and in the cloud - requires a powerful security system to protect your integration ecosystem from end-to-end. With Anypoint Enterprise Security, users can ensure that the integrations running across trust boundaries are safe.

Security issues on the rise

As businesses employ cloud-based and on-premises services and applications, the need for secure integration across your network rises. Security challenges are becoming more complex, fostering the need for solutions to be more sophisticated to better take on those challenges. We have seen:

A rise in the number of API and SOA endpoints. As a result, access control is more important than ever.
Without a powerful security system in place, a security breach could potentially put you out of business.
Ecosystems have evolved and become increasingly complex. They are now highly distributed and having numerous platforms.
Attackers are becoming smarter; consequently, attacks are becoming more malicious.

Mule as an ESB comes equipped with features

The Mule runtime, the heart of MuleSoft's Anypoint Platform, comes equipped with a reliable set of security features to help secure your integration ecosystem:

Anypoint Enterprise Security provides authentication and authorization for inbound requests and credential mapping for outbound calls.
LDAP and third party identity management system integration.
SAML 2.0 federated identity standard provides validation of inbound requests.
SFTP enables Mule flows to read and write to remote directories over the SSH protocol.

Additional features expand on security

The following features are available to users of Anypoint Platform:

OAuth
Credential vault
Security filters
Message encryption
Digital signatures

Anypoint Enterprise Security protects your enterprise network from unwanted access and threats. With bullet-proof integration, Anypoint Enterprise Security works to prevent unwanted access to APIs and SOA endpoints, maintain content integrity and confidentiality with data encryption, and guard your system against security attacks. Specifically, this article will examine exactly how Anypoint Enterprise Security employs features such as message encryption, digital signatures, and a credential vault to eliminate exposure of sensitive enterprise data, protecting your ecosystem.

Eliminate exposure

By eliminating exposure of sensitive data and information, businesses can maintain data integrity and confidentiality. Businesses can encrypt all or part of their message payload, preserve the integrity of their data with digital signatures, and protect access to their systems by storing credentials in an encrypted vault.

Message encryption

Mule Security offers the ability to encrypt or decrypt message content in within a Mule flow by utilizing Mule message processors, allowing you to maintain the integrity of your messages.

Common use cases include:

Sensitive data
Eavesdropping concerns
Communications between departments or lines of business.

Digital signatures

With digital signatures, MuleSoft customers can digitally sign or verify a signature within a Mule flow by using Mule message processors. Doing this allows users to preserve the integrity and confidentiality of their data.

Common use cases include:

Protection from message tampering
Non-repudiation of requests and responses that have been signed
Data modification concerns

Credential vault

Customers need a solid policy in place to protect sensitive values (e.g. passwords), prevent jeopardizing security, and impede exposing credentials. Protect your information by storing credentials in an encrypted format within a credential vault. The credential vault allows access to external endpoints without accessing their credentials directly, keeping sensitive information hidden. The Mule runtime can exclusively access and decrypt the credentials and only during runtime, making it so that only the flows which need access can decrypt the credentials, and do so on the fly.

Common use cases include:

Access to external systems (DB, Mainframe, etc.)
SaaS Integration
Sniffer attack concerns

Leveraging these valuable security features is easy with Mule ESB Enterprise Security. Not only does Mule Enterprise Security provide tools for secure data encryption, it also provides access control and guards your system from future attacks.

Learn more about Mule Enterprise Security with our informative security webinar.

See what Mule ESB can offer you by speaking to an expert or download Mule ESB to get started today.