The near simultaneous advent of cloud, true mobile, and big data technologies has hugely complicated data security, a problem that many companies are only beginning to understand, says Securosis Analyst and President Mike Rothman. This growing realization is helping to drive adoption of data encryption. But while encryption is an important tool for protecting data that no longer resides solely and always inside corporate firewalls, Rothman warns that it should not be seen as a silver bullet for security issues.
“It’s very hard to make generic statements about encryption because there are so many variables,” he says. Whether encryption is the right tool depends in large part on the architecture, the data being protected, who is likely to try to get at it, and how they are likely to do so. And, he warns, “folks who think, ‘Hey, I’m going to encrypt all my databases and that will solve all my problems,’ well, not so much. If I break an application server that has the credentials to access the database, game over. Your encrypted database doesn’t help so much.”
Mike Rothman, President and Analyst, Securosis
Encryption also has two important costs that have traditionally limited adoption to highly secure environments and which, Rothman says, are still with us today. The first is the extra compute load encryption creates every time someone wants to access encrypted data. At first glance one might think that Moore’s Law would have obviated this problem. But Rothman says that while the increase in compute power helps, it also makes brute force key breaking, in which a computer tries different possible keys until it discovers the right one, much more practical. As a result, keys have become more complicated and longer, increasing the encryption/decryption compute load. “I think it’s a wash,” he says.
This should be kept in mind when answering basic questions such as which data really needs encryption and should that encryption be applied when data is at rest, when it is in transit, or when it is in active use. And he warns that if encryption is applied badly, “you can hose your application.”
“Encryption is easy. Key management is hard.”
The other major practical issue has been key management, whose complexity has been increased thanks to the adoption of cloud services. A fairly small number of large enterprises use company-wide key management utilities. Rothman does not necessarily recommend these. Again, he says, whether your company needs to go this route depends on several factors including how much data is being encrypted, where it is being stored, and where it is used. Many more organizations use application-specific encryption, both internally and in the cloud. Increasing numbers of Salesforce clients, for example, are encrypting their data to the point that Salesforce bought an encryption company to provide as an extra service to users. Users of the hosted version of Exchange also often encrypt attached files, so that if someone hacks their e-mail they cannot read the attached files, which are often more important than the e-mails themselves.
In these applications the data is encrypted at the gateway, usually by a cloud service, which takes care of the compute load problem. But a company with four or five encrypted databases, each with its own key and each with large internal user populations, faces a complex key management problem. The problem grows even more complex if users are in multiple locations and include part-timers or freelancers, or if the data needs to be accessed by third parties, such as business partners in a supply chain or customers.
Another issue that comes with the cloud, says Larry Warnock, CEO of encryption startup Gazzang, is that if your sensitive data is on a cloud service, you don’t want employees of that service reading it.
“That was an issue with services like Dropbox and iCloud,” says Rothman. “The fact is that if you are using a SaaS application, and you don’t have to put your credentials into it to access that data, then clearly the provider has the key.”
On the other hand, Securosis itself makes heavy use of Dropbox. It just encrypts the data before sending it into the cloud.
And encryption is not only for cloud services. One Gazzang customer, a financial services company who asked not to be identified by name, is only starting to become involved in cloud services, but uses encryption to provide a last-line of defense for sensitive data in its in-house applications.
Overall, Rothman says, “Encryption is good, and there will be more encryption tomorrow than there is today because more data will be out there tomorrow. Do we need to encrypt as we move data to cloud and hybrid cloud environments? Absolutely. If you have data everywhere, then you need to encrypt. But alot depends on the problem you’re going to solve, the types of data, and the types of adversaries you face.”
[...] Is Encryption the Answer to Data Security in the Cloud? (servicesangle.com) [...]
[...]The information mentioned in the article are some of the best available [...]……
[...]The information mentioned in the article are some of the greatest available [...]……
dehnungsstreifen…
[...]Sites of interest we’ve a link to[...]…
networking strategies to promote your writing. the…
more traffic you get to your online work, the more companies you’ll have approaching you to write for them.here are some additional tips when setting up your portfolio:1. set up a professional web page with your resume, contact information, and some…
from seeing your blogging efforts through to…
the point of completion.third, here are other benefits to working a niche that matches your passions. if you’re passionate about your niche, you’ll find new and exciting ways to expand your business that might otherwise pass unnoticed. if you’re not…
example: xyz.com, xyzblog.com, myxyzblog.com etc.customize your blog…
theme. don’t use the same themes that everyone else uses. you don’t want to blend into the sea of a million other bloggers. design a blog yourself, hire someone to do it for you, or find a theme no one uses…
you need to market your site, you…
often spend far more time doing this, than actually creating the content for your site.time becomes very precious and you need to manage your resources carefully. one way of managing your time effectively is to outsource blog content writing to a…
update your site. you will be able…
to remove a lot of the basic time consuming jobs of blogging, by automating many of the tasks.how to choosewhen researching the best program to use, look into what features they have to offer. look for a blogging platform that utilises…
and goes hand in hand with building…
a good client relationship. past clients will usually know other people who need a good writer. so when you are working for a client, remember he or she will have friends who may also need a writer. referrals can bring you…
also includes small party buses. the limousine…
blog shows a strategic planner how to make most efficient and economical use of all vehicles. in fact, the bigger the event or the bigger the name on the marquee, the more an event planner ought to avail herself of the…
as they tend to deliver wordy descriptions…
which encapsulate all requirements.proposalsa proposal is a suggestion for a project, and can run into thousands of pages for highly complex work. the author’s job is to create a platform on which the proposal can be evaluated and will usually need…
lawn care business…
http://sandiego.craigslist.org/csd/bfs/3361880495.html…
always written for the target audiences and…
the best writing comes when the writer is relaxed and not stressed either. if the environment is peaceful and noiseless, it will be very conducive to such article writing.original and high quality contents matter the mostprospective writer should reali…
write and convey a lot of meaning…
to the reader. in other words, your blog post will appear more interesting to readers if it is supported by good images.statistical facts give credibilitywhen you are writing about any topic, you can make a lot of value addition to it…
you serious questions that indicate that he…
makes some real re-search or does he shoot straight for your wallet? fast answers are always appreciated but if you send your request during a holiday you should realize that web writers are people too! the quality of the answer is…
give feedback, not only about grammar and…
spelling, but also about the word choice and the expression of the thesis and evidence.these basic principals can provide business professionals with a solid foundation for communicating effectively. almost every career requires excellent writing skill…
a letter explaining things such as a…
job loss, loss of spouse or unexpected medical bills.you should also include information about any strength in your financial history such as extended periods of “excellent” credit or payment status, or big loans that you paid in full. once your lend…
- don’t overload your blog with plenty…
of unnecessary, flashy or over-busy sidebar plugins. that is important because you want as little as possible to distract your blog visitors from your excellent content. and because the clutter of useless gadgets will detract from the few banners and c…
what i am trying to do, which…
is to help you create some income so that it can sustain you until the bigger money comes in.so anyway, the go to the search box for the search engine of your choice and put in “kindle publishing for blogs”. find…
and follow it. don’t try to be…
all things to everyone. to have a passion in your writing that will draw readers in you need to write about things that interest you.finally, it’s time to get your feet wet. don’t be surprised if you have a tough time…
of the niche blogger a step-by-step program…
that literally takes you through the process from a to z. everything is explained and there is help available from amy herself, as well as the members of the forums and the program itself.the niche blogger is not just for those…
images to break up text-heavy blog posts…
- write shorter paragraphs7) show personality. i really write the way that i talk. i’m not trying to impress anyone. i just want people to get to know the real me, because the real me is who they will be doing…
types, the best way on how to…
monetize your blog is through text ads.banner ads another means on how to monetize your blog effectively is through banner advertising. this entails advertising with graphics and text. an affiliate system, advertising company or google adsense and the …
where you do absolutely no promotion and…
include nothing but useful content. you need a good sales pitch every time you attempt to promote a product. a simple “click this link” isn’t good enough. with that said, remember that you should avoid content that is nothing but a…
perhaps even easier to use than wordpress…
initially but doesn’t have anywhere near the capabilities of wordpress. still, if you are just starting to blog, blogspot is probably the easiest place to start. if you are just looking for an online diary, then blogspot will serve you well.one…
be a blogger, right? well, no. words…
such as these are very misleading. it probably doesn’t occur to many people that maintaining a blog is far more complicated and time-consuming than the creation process. i know it didn’t occur to me.being a blogger is a big commitment, and…
plan can help you stay on track….
i use mind mapping software to keep track of all my article titles. this makes it much easier to bust out 10 or 15 copies in one sitting.i’ll sit down, open up my mind software, write down at least ten titles…
what i am trying to do, which…
is to help you create some income so that it can sustain you until the bigger money comes in.so anyway, the go to the search box for the search engine of your choice and put in “kindle publishing for blogs”. find…
promote your blog and get the most…
out of it. as a direct seller, it really helps to drive traffic to your site so you can gain exposure and potentially get new customers as well. there is nothing worse than sitting down to write an article, a blog…
a magazine style or business template. try…
to avoid long posts, about 300 words is enough, if your post is too long you could lose the reader’s attention. if you are writing a “how to” post then consider making it into parts. spell check, avoid spelling and grammar…
website or a blog, you will receive…
new feeds and information about blog posts which the blog owner has just posted. for example say, you and your computer are the buyer and your blogs or news sites are the marketers who will give you a lot of new…
fit what the community likes to see…
for each social networking site you choose to share your blog post with.another way to is to find groups and brands within these social networking sites that may be interested in reading your blog post. you can post on their walls…
billboards from highways. the reasoning was, they…
felt drivers were being distracted and therefore more accidents occurred. the same principle applies to your mlm blog.if you have various affiliate programs that you are promoting, use links vs all images in your side-bar. give the side-bar section an …
to host multimedia. if you’re just trying…
to set up a very, very simple one, very quick website, in just a few minutes, i would recommend you use a regular html editor instead. you can still buy html templates and have them look any way you want and…
relation of yours. tell your readers if…
you’d befriend them and what stuff is on their wall. this is a fun one.6. my day job versus my passion. most people, unfortunately, hate their jobs so your readers would relate to this.there you go, just a few examples of…
could be potentially reading your work. enjoy…
your writing and always keep in mind how important what you are doing actually is. writing with a smile on your face will come across in your work. if you wasn’t already aware by now i am a big lover of…
goes beyond more that just simply the…
contents of what you have composed. posting something people find interesting to read is a great start but you also need to be concerned with its presentation and relevancy as well.with that said here are 5 common mistakes you need to…
else the piece of literature is not…
likely to win creditability and hence loose the battle long before it starts. it is acceptable to interlace a few events that did occur with those that did not and come up with something unique. there are well-known writers who have…
finds the answers that he/she is looking…
for and the search stops. user is very happy because found content was exactly what she was looking for. in addition to that search engine is very happy because it was able to deliver very relevant results. so next time when…
the answers that he/she is looking for…
and the search stops. user is very happy because found content was exactly what she was looking for. in addition to that search engine is very happy because it was able to deliver very relevant results. so auto title loans next time when same…