Welcome!

Cloud Security Authors: Elizabeth White, Harry Trott, Kevin Jackson, Nishanth Kadiyala, Stackify Blog

Related Topics: @CloudExpo, Cloud Security

@CloudExpo: News Item

Trusting Data in the Cloud Is About Losing a Key

The online storage and collaboration market has been hot

The online storage and collaboration market has been hot, with early market entrants Dropbox, Box.net and YouSendIt appearing to have taken the initial lead in providing individuals and businesses with the ability to easily store, share, and send large files between multiple parties.

In the spirit of secure collaboration, at this year's RSA event, Ftopia and GuardTime announced a partnership that hopes to shake up the market a bit by raising even higher the pressing question of one's ability to trust their precious data in the cloud. To answer this question, the Ftopia service is designed to allow businesses to securely collaborate by sharing their files anywhere they want over the Internet without having to rely on trust. Rather, they provide the service with built-in data integrity features that utilize mathematics as its form of proof.

Ftopia does cloud-based data collaboration and storage, and together with GuardTime, a cloud security company, signed a deal to offer the market a provably secure collaboration and storage service. Ftopia uses GuardTime's keyless signature technology to digitally sign the clients' data as it is stored in Ftopia rooms.

As described in the public announcement, GuardTime's Keyless Signature technology provides proof of signing authority, time of the signature, and lifelong integrity for data stored in the cloud and in transit between business collaborators. The signature never expires and its verification is based solely on mathematics, eliminating the need for secrets or keys and the unwieldy management associated with traditional PKI technologies that fail in the cloud.

During an interview with Ftopia CEO Philippe Honigman, I was able to ask him what prompted the creation of the partnership and his new release. "As more information moves to the cloud as the primary place of storage, concerns about trust and security are growing as well," he said. "Traditional, defensive security measures, such as intrusion detection, intrusion prevention, strict network access control policies, or even the tried and true anti-malware technologies, are not enough anymore. Business customers are more likely to entrust their information to a third party when they know for certain - more specifically, when they can prove - that their data has not been altered in any way."

After a quick run-through of the capabilities with Honigman, the workflow appears to remain simple and seemingly unchanged. There is no additional action for the users to take on either end of the file sharing transaction. Each file gets its own signature. The signature is a small file that is automatically created and saved alongside the signed file. If the user wants proof that the file in question has not changed since the exact point in time that it was uploaded, they simply collect the file and its signature and use the verification tool provided by GuardTime to perform the comparison. If the signature can be verified, the file is guaranteed to be the same exact file and can be confirmed that it is that exact file from the exact point in time for which it was signed. If the signature cannot be verified, then the file cannot be guaranteed to be the same.

"The solution is both simple and powerful," said Honigman. "On the surface, it would appear that all that GuardTime is providing us is the ability to timestamp or simply sign a file. But, because the signature is keyless, meaning nobody is forced to manage any keys or keep any secrets, the client can get undeniable proof that the file has not been tampered with, not even by Ftopia."

GuardTime CEO Mike Gault says, "We solved the problem of trust by removing the reliance on keys or secrets to prove that the data remains intact. This is accomplished through a series of concatenated SHA-256 hashes for each file that are used to create and destroy a Merkle tree of hashes every second since the beginning of Unix time, 1970."

According to Guardtime, the resulting root hash, referred to by the company as the "Integrity Code", is published monthly in publications such as the Financial Times. To verify the integrity of the data, all one needs is the published Integrity Code, the original file, and its corresponding signature file. With these three pieces, any organization can use the tools provided or, if they are really paranoid, they could do the reverse hash function mathematics to prove that the file remains intact. In short, GuardTime claims that there is no need to rely on any tool, or any third party to gain proof.

It will be interesting to keep an eye on Ftopia to see how their clients use this feature. It seems that the value becomes painfully apparent when an organization is required by law or regulation to provide proof that their data has remained intact - especially if their own integrity was being questioned. Hopefully this is not the case for most organizations. Which company would want to get all twisted up in court because they couldn't prove they weren't involved in a coverup? I feel safe going out on a limb to say none of them.

More Stories By Victor Cruz

Victor Cruz is a writer whose articles have appeared in American Venture, Cloud Computing Journal, CommPro.biz, CSO Magazine, Communications News, Computer Technology Review, eSecurity Planet, Harvard Review, Medical Design Technology, and WebSecurity Journal. He has advised some 50 IT companies in the past 20 years on their marketing strategies. You can reach him at vcruz[at]mediapr.net

@ThingsExpo Stories
The Internet giants are fully embracing AI. All the services they offer to their customers are aimed at drawing a map of the world with the data they get. The AIs from these companies are used to build disruptive approaches that cannot be used by established enterprises, which are threatened by these disruptions. However, most leaders underestimate the effect this will have on their businesses. In his session at 21st Cloud Expo, Rene Buest, Director Market Research & Technology Evangelism at Ara...
In his session at @ThingsExpo, Eric Lachapelle, CEO of the Professional Evaluation and Certification Board (PECB), provided an overview of various initiatives to certify the security of connected devices and future trends in ensuring public trust of IoT. Eric Lachapelle is the Chief Executive Officer of the Professional Evaluation and Certification Board (PECB), an international certification body. His role is to help companies and individuals to achieve professional, accredited and worldwide re...
SYS-CON Events announced today that TechTarget has been named “Media Sponsor” of SYS-CON's 21st International Cloud Expo, which will take place on Oct 31 – Nov 2, 2017, at the Santa Clara Convention Center in Santa Clara, CA. TechTarget storage websites are the best online information resource for news, tips and expert advice for the storage, backup and disaster recovery markets.
The current age of digital transformation means that IT organizations must adapt their toolset to cover all digital experiences, beyond just the end users’. Today’s businesses can no longer focus solely on the digital interactions they manage with employees or customers; they must now contend with non-traditional factors. Whether it's the power of brand to make or break a company, the need to monitor across all locations 24/7, or the ability to proactively resolve issues, companies must adapt to...
SYS-CON Events announced today that Datanami has been named “Media Sponsor” of SYS-CON's 21st International Cloud Expo, which will take place on Oct 31 – Nov 2, 2017, at the Santa Clara Convention Center in Santa Clara, CA. Datanami is a communication channel dedicated to providing insight, analysis and up-to-the-minute information about emerging trends and solutions in Big Data. The publication sheds light on all cutting-edge technologies including networking, storage and applications, and the...
SYS-CON Events announced today that EnterpriseTech has been named “Media Sponsor” of SYS-CON's 21st International Cloud Expo, which will take place on Oct 31 – Nov 2, 2017, at the Santa Clara Convention Center in Santa Clara, CA. EnterpriseTech is a professional resource for news and intelligence covering the migration of high-end technologies into the enterprise and business-IT industry, with a special focus on high-tech solutions in new product development, workload management, increased effi...
SYS-CON Events announced today that MobiDev, a client-oriented software development company, will exhibit at SYS-CON's 21st International Cloud Expo®, which will take place October 31-November 2, 2017, at the Santa Clara Convention Center in Santa Clara, CA. MobiDev is a software company that develops and delivers turn-key mobile apps, websites, web services, and complex software systems for startups and enterprises. Since 2009 it has grown from a small group of passionate engineers and business...
SYS-CON Events announced today that GrapeUp, the leading provider of rapid product development at the speed of business, will exhibit at SYS-CON's 21st International Cloud Expo®, which will take place October 31-November 2, 2017, at the Santa Clara Convention Center in Santa Clara, CA. Grape Up is a software company, specialized in cloud native application development and professional services related to Cloud Foundry PaaS. With five expert teams that operate in various sectors of the market acr...
SYS-CON Events announced today that Ayehu will exhibit at SYS-CON's 21st International Cloud Expo®, which will take place on October 31 - November 2, 2017 at the Santa Clara Convention Center in Santa Clara California. Ayehu provides IT Process Automation & Orchestration solutions for IT and Security professionals to identify and resolve critical incidents and enable rapid containment, eradication, and recovery from cyber security breaches. Ayehu provides customers greater control over IT infras...
Artificial intelligence, machine learning, neural networks. We’re in the midst of a wave of excitement around AI such as hasn’t been seen for a few decades. But those previous periods of inflated expectations led to troughs of disappointment. Will this time be different? Most likely. Applications of AI such as predictive analytics are already decreasing costs and improving reliability of industrial machinery. Furthermore, the funding and research going into AI now comes from a wide range of com...
In this presentation, Striim CTO and founder Steve Wilkes will discuss practical strategies for counteracting fraud and cyberattacks by leveraging real-time streaming analytics. In his session at @ThingsExpo, Steve Wilkes, Founder and Chief Technology Officer at Striim, will provide a detailed look into leveraging streaming data management to correlate events in real time, and identify potential breaches across IoT and non-IoT systems throughout the enterprise. Strategies for processing massive ...
SYS-CON Events announced today that Conference Guru has been named “Media Sponsor” of SYS-CON's 21st International Cloud Expo, which will take place on Oct 31 – Nov 2, 2017, at the Santa Clara Convention Center in Santa Clara, CA. A valuable conference experience generates new contacts, sales leads, potential strategic partners and potential investors; helps gather competitive intelligence and even provides inspiration for new products and services. Conference Guru works with conference organi...
SYS-CON Events announced today that Cloud Academy named "Bronze Sponsor" of 21st International Cloud Expo which will take place October 31 - November 2, 2017 at the Santa Clara Convention Center in Santa Clara, CA. Cloud Academy is the industry’s most innovative, vendor-neutral cloud technology training platform. Cloud Academy provides continuous learning solutions for individuals and enterprise teams for Amazon Web Services, Microsoft Azure, Google Cloud Platform, and the most popular cloud com...
SYS-CON Events announced today that CA Technologies has been named "Platinum Sponsor" of SYS-CON's 21st International Cloud Expo®, which will take place October 31-November 2, 2017, at the Santa Clara Convention Center in Santa Clara, CA. CA Technologies helps customers succeed in a future where every business - from apparel to energy - is being rewritten by software. From planning to development to management to security, CA creates software that fuels transformation for companies in the applic...
SYS-CON Events announced today that TMC has been named “Media Sponsor” of SYS-CON's 21st International Cloud Expo and Big Data at Cloud Expo, which will take place on Oct 31 – Nov 2, 2017, at the Santa Clara Convention Center in Santa Clara, CA. Global buyers rely on TMC’s content-driven marketplaces to make purchase decisions and navigate markets. Learn how we can help you reach your marketing goals.
Internet of @ThingsExpo, taking place October 31 - November 2, 2017, at the Santa Clara Convention Center in Santa Clara, CA, is co-located with 21st Cloud Expo and will feature technical sessions from a rock star conference faculty and the leading industry players in the world. The Internet of Things (IoT) is the most profound change in personal and enterprise IT since the creation of the Worldwide Web more than 20 years ago. All major researchers estimate there will be tens of billions devic...
"MobiDev is a Ukraine-based software development company. We do mobile development, and we're specialists in that. But we do full stack software development for entrepreneurs, for emerging companies, and for enterprise ventures," explained Alan Winters, U.S. Head of Business Development at MobiDev, in this SYS-CON.tv interview at 20th Cloud Expo, held June 6-8, 2017, at the Javits Center in New York City, NY.
SYS-CON Events announced today that IBM has been named “Diamond Sponsor” of SYS-CON's 21st Cloud Expo, which will take place on October 31 through November 2nd 2017 at the Santa Clara Convention Center in Santa Clara, California.
SYS-CON Events announced today that Telecom Reseller has been named “Media Sponsor” of SYS-CON's 21st International Cloud Expo, which will take place on Oct 31 – Nov 2, 2017, at the Santa Clara Convention Center in Santa Clara, CA. Telecom Reseller reports on Unified Communications, UCaaS, BPaaS for enterprise and SMBs. They report extensively on both customer premises based solutions such as IP-PBX as well as cloud based and hosted platforms.
We build IoT infrastructure products - when you have to integrate different devices, different systems and cloud you have to build an application to do that but we eliminate the need to build an application. Our products can integrate any device, any system, any cloud regardless of protocol," explained Peter Jung, Chief Product Officer at Pulzze Systems, in this SYS-CON.tv interview at @ThingsExpo, held November 1-3, 2016, at the Santa Clara Convention Center in Santa Clara, CA