Close
  • Latest News
  • Big Data and Analytics
  • Cloud
  • Networking
  • Cybersecurity
  • Applications
  • IT Management
  • Storage
  • Sponsored
  • Mobile
  • Small Business
  • Development
  • Database
  • Servers
  • Android
  • Apple
  • Innovation
  • Blogs
  • PC Hardware
  • Reviews
  • Search Engines
  • Virtualization
Read Down
Sign in
Close
Welcome!Log into your account
Forgot your password?
Read Down
Password recovery
Recover your password
Close
Search
Logo
Logo
  • Latest News
  • Big Data and Analytics
  • Cloud
  • Networking
  • Cybersecurity
  • Applications
  • IT Management
  • Storage
  • Sponsored
  • Mobile
  • Small Business
  • Development
  • Database
  • Servers
  • Android
  • Apple
  • Innovation
  • Blogs
  • PC Hardware
  • Reviews
  • Search Engines
  • Virtualization
More
    Home Cloud
    • Cloud
    • Cybersecurity
    • Storage

    Data Thefts Reveal Storage Flaws

    By
    Brian Fonseca
    -
    March 7, 2005
    Share
    Facebook
    Twitter
    Linkedin

      Recent high-profile thefts of sensitive data have enterprise IT executives looking hard at the relationships among storage, backup and security, even as vendors prepare new ways to lock down stored information.

      Proposed solutions run the gamut from EVault Inc.s improved online backup to Decru Inc.s sophisticated encryption methods; all aim to mitigate risk at a time of heightened concern for data security.

      The stakes in handling sensitive data, especially on storage tapes, came into stark relief last week when Bank of America Corp., based in Charlotte, N.C., said it lost unencrypted tapes that included personal information on 1.2 million federal employees.

      Such catastrophic security and privacy breaches are leading customers to re-evaluate how often they access their stored tape data, who is granted access, what type of security is in place and whether online disk-to-disk backup is more favorable than traditional tape backup operations.

      Kenan Luptak, IS manager at First National Bank, in Sidney, Neb., two months ago abandoned physical tape backup for EVault InfoStage, a self-managed online disk-array protection system. Luptak said his organization could not afford to take for granted tapes nonverification and lack of integrity checks.

      “You dont have quality control of the individual taking tapes off-site,” said Luptak. “Did they leave them in a car? Did they freeze or have heat exposure? The integrity of tapes is always a question, and this way we dont have to worry about how the tapes are handled.”

      Next month, EVault will unveil a new iSeries agent that will enable administrators to perform hot backups online without disrupting service and an iSeries database trigger method to more quickly capture changes during backups, said officials of EVault, based in Emeryville, Calif.

      Security experts say that regardless of the format enterprises choose for backup, securing data should be a top priority. Right now few organizations take the time to encrypt stored data, but incidents such as Bank of Americas may change that.

      With identity theft at the top of legislators agendas and on the minds of many consumers these days, banks, health care organizations and other groups that hold customer data are likely to find themselves under increased pressure to prove that they are doing everything they can to secure information. Encrypting data at rest on networks as well as backup media would be a step toward restoring customer confidence, experts say.

      Daniel Chow, IT systems and security engineer for Boeing Employees Credit Union, of Tukila, Wash., said he deployed the Decru DataFort T-Series appliance to ensure the privacy of the credit unions customer data written to and stored on encrypted backup tapes.

      “If theres ever a possibility that the vendor accidentally may lose our data or the carrier may lose it, because we do ship it to other locations, were always confident theres no way anyone can access that data,” said Chow. “It was something that was apparent to us, and Decru provides a nice option to do that.”

      BECU maintains more than 60TB of stored data, distributed among several SAN (storage area network) islands with more than 300 ports.

      Officials for Decru, which is based in Redwood City, Calif., said the company is working closely with large storage hardware vendors to enable its CryptoShred technology to automatically and remotely delete encryption keys used to encode stored data anywhere the information resides as part of an integrated business process or ILM (information lifecycle management) plan.

      Had Bank of Americas tapes been encrypted, they would have been of no use to whoever stole them. In fact, under a bill before the U.S. Senate, the bank would not have had to disclose the loss of the tapes if they had been encrypted. Such incidents serve notice that thieves and crackers will seek new ways to get valuable information, experts caution.

      “You dont have to be technically sophisticated to be a hacker anymore,” said Maryann Davidson, chief security officer at Oracle Corp., in Redwood Shores, Calif. “Hacking isnt just for bragging rights and chest thumping. Theres real money in it.”

      Check out eWEEK.coms for the latest news, reviews and analysis on enterprise and small business storage hardware and software.

      Brian Fonseca
      Brian Fonseca is a senior writer at eWEEK who covers database, data management and storage management software, as well as storage hardware. He works out of eWEEK's Woburn, Mass., office. Prior to joining eWEEK, Brian spent four years at InfoWorld as the publication's security reporter. He also covered services, and systems management. Before becoming an IT journalist, Brian worked as a beat reporter for The Herald News in Fall River, Mass., and cut his teeth in the news business as a sports and news producer for Channel 12-WPRI/Fox 64-WNAC in Providence, RI. Brian holds a B.A. in Communications from the University of Massachusetts Amherst.

      MOST POPULAR ARTICLES

      Cybersecurity

      Visa’s Michael Jabbara on Cybersecurity and Digital...

      James Maguire - May 17, 2022 0
      I spoke with Michael Jabbara, VP and Global Head of Fraud Services at Visa, about the cybersecurity technology used to ensure the safe transfer...
      Read more
      Cloud

      Yotascale CEO Asim Razzaq on Controlling Multicloud...

      James Maguire - May 5, 2022 0
      Asim Razzaq, CEO of Yotascale, provides guidance on understanding—and containing—the complex cost structure of multicloud computing. Among the topics we covered:  As you survey the...
      Read more
      IT Management

      Intuit’s Nhung Ho on AI for the...

      James Maguire - May 13, 2022 0
      I spoke with Nhung Ho, Vice President of AI at Intuit, about adoption of AI in the small and medium-sized business market, and how...
      Read more
      Big Data and Analytics

      GoodData CEO Roman Stanek on Business Intelligence...

      James Maguire - May 4, 2022 0
      I spoke with Roman Stanek, CEO of GoodData, about business intelligence, data as a service, and the frustration that many executives have with data...
      Read more
      Applications

      Cisco’s Thimaya Subaiya on Customer Experience in...

      James Maguire - May 10, 2022 0
      I spoke with Thimaya Subaiya, SVP and GM of Global Customer Experience at Cisco, about the factors that create good customer experience – and...
      Read more
      Logo

      eWeek has the latest technology news and analysis, buying guides, and product reviews for IT professionals and technology buyers. The site’s focus is on innovative solutions and covering in-depth technical content. eWeek stays on the cutting edge of technology news and IT trends through interviews and expert analysis. Gain insight from top innovators and thought leaders in the fields of IT, business, enterprise software, startups, and more.

      Facebook
      Linkedin
      RSS
      Twitter
      Youtube

      Advertisers

      Advertise with TechnologyAdvice on eWeek and our other IT-focused platforms.

      Advertise with Us

      Menu

      • About eWeek
      • Subscribe to our Newsletter
      • Latest News

      Our Brands

      • Privacy Policy
      • Terms
      • About
      • Contact
      • Advertise
      • Sitemap
      • California – Do Not Sell My Information

      Property of TechnologyAdvice.
      © 2021 TechnologyAdvice. All Rights Reserved

      Advertiser Disclosure: Some of the products that appear on this site are from companies from which TechnologyAdvice receives compensation. This compensation may impact how and where products appear on this site including, for example, the order in which they appear. TechnologyAdvice does not include all companies or all types of products available in the marketplace.

      ×