DAILY NEWS AND INFORMATION FOR THE GLOBAL GRID COMMUNITY /    ( Table of Contents )

Breaking News - Security:

Decru Extends Storage Security With DataFort 2.0 Platform

Decru Inc, a leader in networked storage security, unveiled its next-generation Decru DataFort storage security platform, expanding ease-of-use and security features. Significant new features in the DataFort 2.0 platform include Storage VPN features for secure Web-based file access, Transparent Rekeying for NAS, hardware-accelerated compression for tape encryption and CryptoShred secure deletion.

DataFort 2.0 software features are incorporated into three appliance families: DataFort E-Series appliances for NAS and DAS environments, DataFort FC-Series for SAN and tape environments, and DataFort T-Series for tape-only environments. As part of the announcement, Decru also introduced three new 1U appliances: DataFort E515 for NAS, and DataFort FC525 and T525 for SAN and tape.

Web services, utility computing, .NET, CPU harvesting and distributed computing are just a few of the technologies that fall under the Grid computing umbrella. Gt04 -- a premiere enterprise Grid computing conference targeting industrial and commercial users -- will gather experts, and outline strategies and road maps for Grid deployment. For more information, visit www.gt04.com.

Grid computing is here!

Providing security for stored data is a growing concern for IT organizations worldwide, due to the evolving risk profiles of internal and external attacks. According to the FBI/Computer Security Institute, 50-80 percent of computer attacks now originate behind the firewall, and 67 percent of companies reported internal breaches of their systems in the last 12 months. Many of the largest security breaches over the last year have been a result of unauthorized physical or electronic access to stored data, and trends such as datacenter consolidation, SAN extension and offshoring have further increased the threats to stored data.

"Many corporate security officers are focused on protecting the megabytes in flight, when they should really be worrying about the terabytes at rest," said Jon Oltsik, senior analyst with Enterprise Storage Group. "Any company that deals with credit cards, social security numbers, healthcare data, or client data needs to address storage security this year -- it's a matter of best practices and compliance. Customers need a platform like Decru DataFort 2.0 that combines high security with simplicity."

The Decru DataFort appliance combines secure access controls, authentication, storage encryption, and secure logging to provide unprecedented protection for sensitive stored data. By locking down stored data with strong encryption and routing all access through secure hardware, DataFort radically simplifies the security model for networked storage. New features of the 2.0 platform include:

• Storage VPN: Decru DataFort E-series appliances for NAS environments include Storage VPN features, enabling remote users to securely access stored files using a Web client, password, and optional smart card authentication. All data is encrypted at rest and transmitted over encrypted SSL connections, and data can be shared without changes to existing storage or file structures. Support for the Web-based Distributed Authoring and Versioning (WebDAV) standard enables drag-and-drop access to files over the Internet. DataFort also supports IPsec for authentication and encryption of data in flight. Organizations can use Storage VPN features to provide network storage access for contractors or remote employees, create secure vaults for partner data sharing, streamline supplier and customer interactions, and insure the integrity and confidentiality of materials distributed to board members.
• Transparent Rekeying: This unique, patent-pending technology, now available on DataFort E-Series appliances for NAS, enables organizations to encrypt or rekey existing files in place without taking the data offline. DataFort FC-series appliances for SAN environments have supported block-level rekeying starting with version 1.0. Initial encryption occurs in the background, without degrading network or storage performance. This feature can also be used by organizations that wish to rekey block or file-level data in accordance with their security policies.
• Tape Compression: Decru DataFort FC525 and T525 appliances support hardware-accelerated compression for tape encryption. This feature enables encryption of sensitive data on tape without affecting backup windows or expanding the size of stored data. Previous versions provided software-based compression.
• CryptoShred Secure Deletion: Cleartext data written to disk is essentially indelible -- modern forensic techniques can easily recover cleartext information from deleted files and disks. Decru CryptoShred features, available for all DataFort models, enable electronic file shredding so that data can be securely and permanently deleted from disks. Decru DataFort ensures that sensitive or regulated data is written to disk in encrypted format, and all encryption keys are stored in secure hardware. CryptoShred erases centralized encryption keys, instantly deleting all copies of data regardless of location or storage media. Applications range from the data center to the battlefield. Decru CryptoShred has been certified by the U.S. Department of Defense for compliance with its 5015.2 directive for secure records management.

Additional features in the 2.0 release include an updated Web user interface for administration, and support for multiple administrator roles, large clusters, load balancing and CIFS Kerberos authentication.

"In today's complex network environments, simplicity equals security," said Kevin Brown, vice president of marketing for Decru. "The DataFort 2.0 platform adds powerful new security and deployment features, all of which are transparent to existing infrastructure and applications. By providing a strong foundation of trust and control for stored data, we allow our customers to focus on offense."