MariaDB(R) Closes the Gap in Data Security With Open Source Database Encryption Contributed by Google

SAN FRANCISCO, CA and HELSINKI, FINLAND--(Marketwired - Sep 16, 2015) - MariaDB® Corporation, a recognized leader in open source database solutions for high availability, scalability and performance, today announced the release of MariaDB 10.1 RC, a project supervised by the MariaDB Foundation, which delivers easy-to-deploy, native database encryption without sacrificing performance and cost. By upgrading to MariaDB 10.1, MySQL and MariaDB users can fully encrypt their databases, without requiring any changes to applications, and without any overall performance degradation. Commercial databases and applications can be migrated to MariaDB 10.1 as well, enabling organizations to encrypt databases and protect their data-at-rest -- at a fraction of their current total cost of ownership. MariaDB 10.1 also includes improvements in scalability, high availability, performance and interoperability.

With the consolidated total cost to respond to and remediate a single data breach averaging $3.8 million globally, and the average cost per compromised record estimated at $154, data encryption is a critical imperative.¹ Data hackers have evolved, and their techniques are more sophisticated. This, combined with the exponential growth of sensitive data that companies must manage in distributed environments on premises and in the cloud, means that the cost of using perimeter security deterrents is no longer a viable option.

DBMS providers have traditionally buttressed their offerings with third-party extensions for database encryption -- but their high cost, maintenance requirements, and the resulting impact on performance made them an unfeasible longer-term option for most companies. By layering native database encryption, contributed by Google, in the release of MariaDB 10.1, the company is helping to create multi-layer security protection.

"Data-centric security is paramount, but cost, performance concerns, and deployment challenges have historically served as barriers to broader adoption of data encryption," said Garrett Bekker, Senior Analyst, Enterprise Security at 451 Research. "With native, transparent data encryption in MariaDB 10.1, MariaDB helps ease adoption hurdles for CISOs and CIOs who are looking to adopt best practices in data security."

"We are pleased to make MariaDB 10.1 available to the open source community, with data encryption capabilities contributed by Google," said Otto Kekäläinen, CEO of the MariaDB Foundation. "With this latest release, MariaDB builds on being the most scalable and reliable open source database to now also be the most secure."

The MariaDB 10.1 release includes enhancements in key areas: security, scalability, high availability, performance and interoperability.

• Security advantages over other open source databases include:
  • Data-at-rest encryption: instance and table-level encryption with support for rolling keys (contributed by Google)
  • Password validation
  • Role-based access control improvements (default role) and tuning
• High availability enhancements include a best-of-breed solution through full integration of Galera Cluster
• Scalability enhancements include:
  • Optimistic parallel replication - all transactions will be considered to be run in parallel, giving another performance boost in master-to-slave replication
  • Slave execution of triggers when using row-based replication
  • WebScaleSQL performance enhancements
• Performance enhancements include:
  • Query timeouts
  • InnoDB improvements such as multi-threaded flush, page compression for FusionIO/nvmfs
  • Optimizer enhancements including EXPLAIN JSON and EXPLAIN ANALYZE (with FORMAT=JSON)
• Interoperability enhancements include:
  • CONNECT engine will have JSON/BSON support

MariaDB was recognized by Gartner on October 16, 2014, when placed in the leader's quadrant of the Magic Quadrant for Operational Database Management Systems.²

Availability
MariaDB 10.1 RC is currently available to download, with general availability planned for early October.

Learn more about the MariaDB/MySQL ecosystem from Amazon, Facebook and YouTube speakers at SF-Bay-Area-MariaDB-Meet-Up. Wednesday, September 16, 2015, 6:30 p.m. - 9:00 p.m., Menlo Park, CA

Follow MariaDB on LinkedIn, Facebook and Twitter: @mariadb

About MariaDB Foundation
The MariaDB Foundation is a global not-for-profit established to promote, protect and advance the codebase, community and ecosystem of the free and open source MariaDB database. The Foundation supports an extraordinary community of users, developers and activists who help drive the adoption of MariaDB Server and MariaDB MaxScale around the world, and ensure that organizations can use MariaDB and MySQL in mission-critical, high-transaction environments.

About MariaDB Corporation
MariaDB Corporation is a recognized leader in open source database solutions for SaaS, cloud and on-premises applications that require high availability, scalability, and performance. Built by the founder and core engineering team behind MySQL, MariaDB is the database that powers billions of users on sites like Google search and Wikipedia. Moreover, MariaDB is the new "M" in LAMP, having displaced MySQL as the default database in the Red Hat and SUSE Linux distributions. In addition to partnering in the cloud with AWS Aurora and Microsoft Azure, MariaDB is included in Pivotal Cloud Foundry, Rackspace and other cloud stacks, and it is the database of choice for IBM POWER8 and IBM z Systems. MariaDB has more than 2 million users globally and 550 customers in more than 45 countries, including global brands such as Google, Facebook, HP, Wikipedia, Deutsche Telekom, Virgin Mobile, and Booking.com. For more information, visit mariadb.com.

¹ Ponemon Institute, 2015 Cost of Data Breach Study: Global Analysis, sponsored by IBM.

² Gartner does not endorse any vendor, product or service depicted in its research publications, and does not advise technology users to select only those vendors with the highest ratings or other designation. Gartner research publications consist of the opinions of Gartner's research organization and should not be construed as statements of fact. Gartner disclaims all warranties, expressed or implied, with respect to this research, including any warranties of merchantability or fitness for a particular purpose.