@CloudExpo Authors: Pat Romanski, Zakia Bouachraoui, Yeshim Deniz, Elizabeth White, Liz McMillan

Related Topics: @CloudExpo, Cloud Security

@CloudExpo: Blog Feed Post

Cloud Encryption and Key Management for Software Vendors

The security dilemma is here to stay

(Or: If you’re an ISV running on Amazon Web Services – This one is for you…)

Over the past year, the trend of developing and delivering a software offering over a public cloud such as Amazon Web Services has grown dramatically. Software Vendors, both established and start-up companies, are using Infrastructure as a Service for its obvious advantages, such as cost effectiveness, redundancy, high availability, and probably the most dramatic effect for a software vendor – flexibility. A software vendor can make use of the IaaS provided APIs to automatically add servers, disks, backup, etc. They can start small and ramp up very quickly.

The security dilemma is here to stay

Those of you running software in the cloud are very well aware of the fact that the cloud provider will never take responsibility for your cloud implementation, which makes perfect sense if you think about it. The cloud provider’s responsibility is to secure the perimeter they provide, and the good ones are very good at it. On the other hand, everything installed by you in your cloud is under your responsibility, and when you’re providing a service to your customers, you better make sure you’ve taken appropriate measures to secure your cloud implementation, and equally important, to let your customers know you’ve done what it takes to keep them safe. But, as I’ve written in my previous blog post (Breaking the cloud encryption and key management paradigm), when it comes to security in the cloud, specifically around cloud encryption and key management in the cloud, the currently available solutions are limited and are far from satisfying the security needs of a software vendor.

Get me a cloud-enabled security solution

What are the top priority requirements for a software vendor running in the cloud? According to the ones we’re talking to it’s pretty straightforward:

  1. A cloud security solution that enables them, or in some cases, their customers, to maintain the security and privacy in their cloud account, without having to trust a third party vendor with the security elements of the solution.
  2. They need a strong, simple to install, yet highly flexible cloud-enabled security solution. A security solution that protects their customers’ information, whether it is private data, brand reputation, or intellectual property.

Although seemingly obvious, it appears many of the existing security solution providers out there fail in addressing these obvious requirements. The technology needed to really meet them – is not trivial at all…

Read the original blog entry...

More Stories By Gilad Parann-Nissany

Gilad Parann-Nissany, Founder and CEO at Porticor is a pioneer of Cloud Computing. He has built SaaS Clouds for medium and small enterprises at SAP (CTO Small Business); contributing to several SAP products and reaching more than 8 million users. Recently he has created a consumer Cloud at G.ho.st - a cloud operating system that delighted hundreds of thousands of users while providing browser-based and mobile access to data, people and a variety of cloud-based applications. He is now CEO of Porticor, a leader in Virtual Privacy and Cloud Security.

CloudEXPO Stories
Big Data Federation, Inc. develops and applies artificial intelligence to predict financial and economic events that matter. The company uncovers patterns and precise drivers of performance and outcomes with the aid of machine-learning algorithms, big data, and fundamental analysis. Their products are deployed by some of the world's largest financial institutions.
DevOpsSUMMIT at CloudEXPO will expand the DevOps community, enable a wide sharing of knowledge, and educate delegates and technology providers alike. Recent research has shown that DevOps dramatically reduces development time, the amount of enterprise IT professionals put out fires, and support time generally. Time spent on infrastructure development is significantly increased, and DevOps practitioners report more software releases and higher quality. Sponsors of DevOpsSUMMIT at CloudEXPO will benefit from unmatched branding, profile building and lead generation opportunities.
Andrew Keys is Co-Founder of ConsenSys Enterprise. He comes to ConsenSys Enterprise with capital markets, technology and entrepreneurial experience. Previously, he worked for UBS investment bank in equities analysis. Later, he was responsible for the creation and distribution of life settlement products to hedge funds and investment banks. After, he co-founded a revenue cycle management company where he learned about Bitcoin and eventually Ethereal. Andrew's role at ConsenSys Enterprise is a multi-faceted approach of strategy and enterprise business development. Andrew graduated from Loyola University in Maryland and University of Auckland with degrees in economics and international finance.
FinTech Is Now Part of the CloudEXPO New York Program. Financial enterprises in New York City, London, Singapore, and other world financial capitals are embracing a new generation of smart, automated FinTech that eliminates many cumbersome, slow, and expensive intermediate processes from their businesses. Accordingly, attendees at the upcoming 22nd CloudEXPO | DXWorldEXPO November 12-13, 2018 in New York City will find fresh new content in two new tracks called: FinTechEXPO New York Blockchain Event which will incorporate FinTech and Blockchain, as well as machine learning, artificial intelligence and deep learning in these two distinct tracks. FinTech brings efficiency as well as the ability to deliver new services and a much improved customer experience throughout the global financial services industry. FinTech is a natural fit with cloud computing, as new services are quickly develope...
David Friend is the co-founder and CEO of Wasabi, the hot cloud storage company that delivers fast, low-cost, and reliable cloud storage. Prior to Wasabi, David co-founded Carbonite, one of the world's leading cloud backup companies. A successful tech entrepreneur for more than 30 years, David got his start at ARP Instruments, a manufacturer of synthesizers for rock bands, where he worked with leading musicians of the day like Stevie Wonder, Pete Townsend of The Who, and Led Zeppelin. David has also co-founded five other companies including Computer Pictures Corporation - an early player in computer graphics, Pilot Software - a company that pioneered multidimensional databases for crunching large amounts of customer data for major retail companies, Faxnet - which became the world's largest provider of fax-to-email services, as well as Sonexis - a VoIP conferencing company.