Cloud Security Authors: Dana Gardner, Liz McMillan, Elizabeth White, Yeshim Deniz, Maria C. Horton

Related Topics: @CloudExpo, Containers Expo Blog, Cloud Security

@CloudExpo: Blog Feed Post

One-Click Cloud Data Security

Cloud providers are in the midst of a transition

We’ve always had a close relationship with cloud providers, such as Amazon Web Services and Red Hat OpenShift. Lately we have been hearing from an ever wider spectrum of the cloud provider industry, and their cloud data security requirements show a pattern.

Providers need to differentiate themselves in a competitive market, and they need to ensure high security standards. Cloud data security is a must have, but it’s also something that requires expertise.

Cloud providers are in the midst of a transition
Cloud providers are facing a market in transition, from the hosting model to the cloud model. Many of them have already invested in virtualization, during the previous wave of innovation. Popular choices have been VMware, XEN, and KVM.

Now they are rolling out the next generation of cloud infrastructure and platform solutions. Both private and public cloud offerings are in scope, and we are seeing both homogenous technology stacks and mixed stacks. For example, while some cloud providers we talk to are VMware shops, others are mixing a management tool from one vendor with a virtualization solution from another.

One click Cloud Data Security

The motive is the huge success of cloud solutions with customers. Customers like the pay-as-you-go economics of cloud; they like the flexibility and elasticity even better. Being able to get 1 or 100 servers in minutes, 10GB or 10TB whenever you like, and to give them back whenever you like; these values are driving the entire market.

No compromise on cloud data security
Whatever their strategy, all the providers are quoting their customers, who cannot compromise on cloud data security. The motives may vary; for some it is regulatory compliance, while for others it may be the brand value or sensitivity of data.

As a result, some customers will bring only less sensitive data to the cloud, which limits the benefits of cloud to less sensitive projects. This is typical of transition, but everybody is looking for answers that will be appropriate for more sensitive data.

No one wants to compromise between the flexibility of cloud and the sensitivity of their data. Tradeoffs are not possible. If customers perceive their data to be sensitive, they demand a solution which offers both the full flexibility of cloud and the level of security required by the data.

Data at rest does require a revolution in Cloud Encryption
Data at rest is one of the trickiest issues, as perceived by customers. They are moving their data out of the four walls of the data center, as it were, and into an environment where they themselves will manage their disks using a browser.

Customers express the following concern: if I manage my disk through a browser, than a hacker might too (heaven forbid). As well-known security analyst Rich Mogul once blogged, “Anyone with access to your management plane (with sufficient rights) can snapshot a volume and move it around; It only takes 2-3 command lines to snapshot a drive off to object storage, make it public, and then load it up in a hostile environment”.

The universal answer is cloud encryption, and cloud encryption does work. Well known encryption algorithms like AES-256 or Blowfish can protect data. But like all buzz words, it pays to look closer.

The fly in the ointment is, where do you keep the cloud encryption keys? There are no good answers, though several have tried.

Some opinions suggest that vendors will keep the keys for you; which requires you trust them. Hmmm. Are there other approaches?

Some opinions suggest “trust no one”; an appealing message for the security conscious customer. They further suggest you take your encryption keys back with you to your data center. This is not perfect for the customer, as they have to pay and maintain a physical key management infrastructure in-house. Remember, they went to the cloud to get away from that.

It’s also not a perfect option for cloud providers because it’s contrary to their business model. Imagine a provider telling a customer “don’t trust me”.

Finally, some customer scenarios simply break if you require installation in a physical data center. Imagine a disaster recovery scenario that still requires “just a little bit” of the data center to continue functioning. Imagine an ISV who has staked their future on a pure cloud approach.

These are business cases which require new thinking.

Cloud data security requirements
Thinking all these problems through, the only real solution is cloud encryption with cloud key management that:

  • Allows customers to literally trust no one, yet without needing a physical data center
  • Provides military grade security
  • Works 100% in the cloud, and can be provisioned in well-built cloud data centers
  • Provides all the cloud values: “one click” solutions that are up in minutes, flexible and elastic

Quite a tall order… Cloud providers are discovering you cannot tack on such capabilities, you must design for them.

Porticor’s split-key encryption, built for homomorphic key encryption, was designed from the ground up to tackle these requirements. This solution packages a great deal of complexity into a cloud encryption and cloud key management solution that comes up in minutes, and allows the customer to trust no one.

Read the original blog entry...

More Stories By Gilad Parann-Nissany

Gilad Parann-Nissany, Founder and CEO at Porticor is a pioneer of Cloud Computing. He has built SaaS Clouds for medium and small enterprises at SAP (CTO Small Business); contributing to several SAP products and reaching more than 8 million users. Recently he has created a consumer Cloud at G.ho.st - a cloud operating system that delighted hundreds of thousands of users while providing browser-based and mobile access to data, people and a variety of cloud-based applications. He is now CEO of Porticor, a leader in Virtual Privacy and Cloud Security.

@ThingsExpo Stories
In his general session at 18th Cloud Expo, Lee Atchison, Principal Cloud Architect and Advocate at New Relic, discussed cloud as a ‘better data center’ and how it adds new capacity (faster) and improves application availability (redundancy). The cloud is a ‘Dynamic Tool for Dynamic Apps’ and resource allocation is an integral part of your application architecture, so use only the resources you need and allocate /de-allocate resources on the fly.
DevOps is being widely accepted (if not fully adopted) as essential in enterprise IT. But as Enterprise DevOps gains maturity, expands scope, and increases velocity, the need for data-driven decisions across teams becomes more acute. DevOps teams in any modern business must wrangle the ‘digital exhaust’ from the delivery toolchain, "pervasive" and "cognitive" computing, APIs and services, mobile devices and applications, the Internet of Things, and now even blockchain. In this power panel at @...
SYS-CON Events announced today that SoftNet Solutions will exhibit at the 19th International Cloud Expo, which will take place on November 1–3, 2016, at the Santa Clara Convention Center in Santa Clara, CA. SoftNet Solutions specializes in Enterprise Solutions for Hadoop and Big Data. It offers customers the most open, robust, and value-conscious portfolio of solutions, services, and tools for the shortest route to success with Big Data. The unique differentiator is the ability to architect and ...
SYS-CON Events announced today that Embotics, the cloud automation company, will exhibit at the 19th International Cloud Expo, which will take place on November 1–3, 2016, at the Santa Clara Convention Center in Santa Clara, CA. Embotics is the cloud automation company for IT organizations and service providers that need to improve provisioning or enable self-service capabilities. With a relentless focus on delivering a premier user experience and unmatched customer support, Embotics is the fas...
SYS-CON Events announced today that MathFreeOn will exhibit at the 19th International Cloud Expo, which will take place on November 1–3, 2016, at the Santa Clara Convention Center in Santa Clara, CA. MathFreeOn is Software as a Service (SaaS) used in Engineering and Math education. Write scripts and solve math problems online. MathFreeOn provides online courses for beginners or amateurs who have difficulties in writing scripts. In accordance with various mathematical topics, there are more tha...
SYS-CON Events announced today that Niagara Networks will exhibit at the 19th International Cloud Expo, which will take place on November 1–3, 2016, at the Santa Clara Convention Center in Santa Clara, CA. Niagara Networks offers the highest port-density systems, and the most complete Next-Generation Network Visibility systems including Network Packet Brokers, Bypass Switches, and Network TAPs.
The best way to leverage your Cloud Expo presence as a sponsor and exhibitor is to plan your news announcements around our events. The press covering Cloud Expo and @ThingsExpo will have access to these releases and will amplify your news announcements. More than two dozen Cloud companies either set deals at our shows or have announced their mergers and acquisitions at Cloud Expo. Product announcements during our show provide your company with the most reach through our targeted audiences.
In his general session at 19th Cloud Expo, Manish Dixit, VP of Product and Engineering at Dice, will discuss how Dice leverages data insights and tools to help both tech professionals and recruiters better understand how skills relate to each other and which skills are in high demand using interactive visualizations and salary indicator tools to maximize earning potential. Manish Dixit is VP of Product and Engineering at Dice. As the leader of the Product, Engineering and Data Sciences team a...
Virgil consists of an open-source encryption library, which implements Cryptographic Message Syntax (CMS) and Elliptic Curve Integrated Encryption Scheme (ECIES) (including RSA schema), a Key Management API, and a cloud-based Key Management Service (Virgil Keys). The Virgil Keys Service consists of a public key service and a private key escrow service. 

OnProcess Technology has announced it will be a featured speaker at @ThingsExpo, taking place November 1 - 3, 2016, in Santa Clara, California. Dan Gettens, OnProcess’ Chief Analytics Officer, will discuss how Internet of Things (IoT) data can be leveraged to predict product failures, improve uptime and slash costly inventory stock. @ThingsExpo is an annual gathering of IoT and cloud developers, practitioners and thought-leaders who exchange ideas and insights on topics ranging from Big Data in...
@ThingsExpo has been named the Top 5 Most Influential Internet of Things Brand by Onalytica in the ‘The Internet of Things Landscape 2015: Top 100 Individuals and Brands.' Onalytica analyzed Twitter conversations around the #IoT debate to uncover the most influential brands and individuals driving the conversation. Onalytica captured data from 56,224 users. The PageRank based methodology they use to extract influencers on a particular topic (tweets mentioning #InternetofThings or #IoT in this ...
Data is the fuel that drives the machine learning algorithmic engines and ultimately provides the business value. In his session at Cloud Expo, Ed Featherston, a director and senior enterprise architect at Collaborative Consulting, will discuss the key considerations around quality, volume, timeliness, and pedigree that must be dealt with in order to properly fuel that engine.
In an era of historic innovation fueled by unprecedented access to data and technology, the low cost and risk of entering new markets has leveled the playing field for business. Today, any ambitious innovator can easily introduce a new application or product that can reinvent business models and transform the client experience. In their Day 2 Keynote at 19th Cloud Expo, Mercer Rowe, IBM Vice President of Strategic Alliances, and Raejeanne Skillern, Intel Vice President of Data Center Group and ...
I'm a lonely sensor. I spend all day telling the world how I'm feeling, but none of the other sensors seem to care. I want to be connected. I want to build relationships with other sensors to be more useful for my human. I want my human to understand that when my friends next door are too hot for a while, I'll soon be flaming. And when all my friends go outside without me, I may be left behind. Don't just log my data; use the relationship graph. In his session at @ThingsExpo, Ryan Boyd, Engi...
Successful digital transformation requires new organizational competencies and capabilities. Research tells us that the biggest impediment to successful transformation is human; consequently, the biggest enabler is a properly skilled and empowered workforce. In the digital age, new individual and collective competencies are required. In his session at 19th Cloud Expo, Bob Newhouse, CEO and founder of Agilitiv, will draw together recent research and lessons learned from emerging and established ...
There is growing need for data-driven applications and the need for digital platforms to build these apps. In his session at 19th Cloud Expo, Muddu Sudhakar, VP and GM of Security & IoT at Splunk, will cover different PaaS solutions and Big Data platforms that are available to build applications. In addition, AI and machine learning are creating new requirements that developers need in the building of next-gen apps. The next-generation digital platforms have some of the past platform needs a...
Smart Cities are here to stay, but for their promise to be delivered, the data they produce must not be put in new siloes. In his session at @ThingsExpo, Mathias Herberts, Co-founder and CTO of Cityzen Data, will deep dive into best practices that will ensure a successful smart city journey.
More and more brands have jumped on the IoT bandwagon. We have an excess of wearables – activity trackers, smartwatches, smart glasses and sneakers, and more that track seemingly endless datapoints. However, most consumers have no idea what “IoT” means. Creating more wearables that track data shouldn't be the aim of brands; delivering meaningful, tangible relevance to their users should be. We're in a period in which the IoT pendulum is still swinging. Initially, it swung toward "smart for smar...
19th Cloud Expo, taking place November 1-3, 2016, at the Santa Clara Convention Center in Santa Clara, CA, will feature technical sessions from a rock star conference faculty and the leading industry players in the world. Cloud computing is now being embraced by a majority of enterprises of all sizes. Yesterday's debate about public vs. private has transformed into the reality of hybrid cloud: a recent survey shows that 74% of enterprises have a hybrid cloud strategy. Meanwhile, 94% of enterpri...
Two weeks ago (November 3-5), I attended the Cloud Expo Silicon Valley as a speaker, where I presented on the security and privacy due diligence requirements for cloud solutions. Cloud security is a topical issue for every CIO, CISO, and technology buyer. Decision-makers are always looking for insights on how to mitigate the security risks of implementing and using cloud solutions. Based on the presentation topics covered at the conference, as well as the general discussions heard between sessi...