As part of our cloud strategy, we’ve recently released a VMware version of
our cloud security offering. It allows cloud providers using VMware, as well
as the cloud users themselves, to create an encrypted environment within
minutes, while eliminating the complexity around encryption key management in
the cloud without compromising trust and confidentiality.
During this process we’ve engaged in many conversations with the cloud
providers’ community to better understand their requirements, and equally
important – their customers’ requirements. We’ve identified some
interesting patterns with regards to cloud data security, which I thought
would be beneficial to share.
Where does it make more sense to integrate the encryption solution?
One repetitive issue we’ve discussed with cloud providers’ was the ideal
location for virtual encryption integration. In other words – wh... (more)
With companies increasingly worried about their data in the cloud, a number
of providers have cropped up to offer various types of encryption
Many studies have shown a chasm between cloud service providers and their
customers regarding who is responsible for the security of the customer’s
data: The providers put the responsibility in the hands of the customer, but
the customer usually disagrees.
According to a study conducted by the Ponemon Institute last year, for
example, nearly seven in 10 cloud providers put responsibility for the
security of a customer’s data with the custom... (more)
Cloud computing brings many advantages including elasticity, flexibility, and
pay-per-use. But when looking at cloud security, and specifically encrypted
cloud storage the picture is much more complex.
Cloud security (in IaaS and PaaS scenarios) is a shared responsibility. The
cloud provider is responsible for securing the datacenter premise, the
virtualization layer, and the Host OS, but it is the cloud customer’s
responsibility to secure the host OS, work with an encrypted cloud storage
and secure the application level.
The missing piece by shel silverstein
Cloud data security... (more)
With an objective to deliver an end-to-end cloud data security solution based
on Red Hat Enterprise Linux to Red Hat customers, Porticor – a company
offering cloud data security solutions – recently joined the Red Hat
Innovate program.
By joining the Red Hat Innovate program, Porticor is able to leverage the
power, openness and collaborative nature of open source communities,
including enhanced access to Red Hat collaboration initiatives and software
programs.
The Red Hat Innovate program offers its members with benefits such as joint
marketing opportunities; access to Red Hat ... (more)
Transparent Data Encryption (TDE), sometimes also called Transparent Database
Encryption, is one way to encrypt database content. TDE offers encryption at
a column, table, and tablespace level. This makes TDE one of the more highly
configurable ways to encrypt database content, though some of these
configuration options come with a performance price.
While TDE is well known in the Data Center, bringing it to the realm of Cloud
Data Security does involve some new technical and operational questions.
Database products that support TDE
TDE is available as an “enterprise level” feature... (more)