Two-Stage Encryption for Strengthening Data Security in Web-Based Databases: AES-256 and RSA Integration
Dimas Gumerang Ryandika, Wahyu Adi Prabowo · 2023
The research introduces a two-stage encryption approach, integrating AES-256 and RSA algorithms, to bolster the security of web-based databases. Focusing specifically on databases, the study’s primary objective was to fortify data protection against SQL Injection attacks. Employing a PHP-native model with CRUD functions, the study meticulously implemented and tested the integration of AES-256 and RSA encryption and decryption procedures. The results showcased successful encryption of sensitive information, rendering the targeted columns impervious to unauthorized access. However, challenges surfaced, particularly concerning potential impacts on web response times, especially with extensive datasets. Performance concerns associated with creating public-private key pairs for each data storage operation were evident. Query performance, especially with encrypted attributes, posed significant hurdles. In the realm of further research, this study underscores the delicate equilibrium between security and efficiency in web-based database systems. Future investigations should scrutinize the cost implications and resource utilization in large-scale implementations. Optimizing the methodology’s performance, elucidating processes executed once versus those repeated for each data storage action, and exploring the incorporation of indexes are vital avenues for exploration. Additionally, practical implications regarding the real-world implementation of encryption techniques demand in-depth analysis. Addressing these aspects will not only enhance data security but also guide the development of more efficient and practical web-based database protection strategies.