Privacy/security attacks on data in memory

Data exfiltration refers to the unauthorized transfer or theft of sensitive information from a computer or network to a remote location controlled by an attacker. It can occur through various means, such as hacking, malware, phishing, or social engineering. Attackers often use data exfiltration to steal valuable intellectual property, financial information, personally identifiable information (PII), or trade secrets for their own gain. Once the data is stolen, it can be sold on the dark web, used for identity theft, or held for ransom. To prevent data exfiltration, organizations can implement security measures such as firewalls, intrusion detection and prevention systems, encryption, access controls, and employee training programs.

Data at rest

In a typical product/application, data will be persisted on a physical storage system, such as a filesystem, database system (SQL/NoSQL), Hadoop filesystem, tape, drive, or cloud. This data is...