Story image

Micro Focus: How to reduce the cost of data security

10 May 2019

No information technology process is free.

There is always a cost; if not to the service consumer, then most definitely to the service provider. Data protection in the form of either encryption or tokenisation is no exception.

When these technologies are added to an existing IT process, costs go up, according to Micro Focus.

These can be direct costs, in the form of acquiring more equipment or software licences or spending more on operational costs, such as power and staff.

Or the costs can be indirect, for example, taking more time to complete an IT process as data protection is CPU-intensive.

While each data protection operation takes microseconds, in a large organisation protecting petabytes of data, these all add up.

Micro Focus Australia and New Zealand enterprise security platforms director George Atrash says,  “The question then becomes how organisations can mitigate these direct and indirect costs. The answer is by reducing the number of times a data protection IT process needs to run.

“This can be done by protecting data at the application level, avoiding decryption when possible, and reducing the life cycle key management cost.”

One of the benefits of protecting data at the application level is protection can be applied only once. Persistent and pervasive data benefits most from application-level protection as the data need not be protected and re-identified when it moves throughout the enterprise.

This avoids security gaps, as well as the cost of repeated protect/unprotect cycles.

So, while application-level data protection may cost more during deployment, this method has lower operational cost.

Atrash says, “This means that one method of reducing cost and increasing overall system performance is avoiding unnecessary protection.

“The second method is to avoid unnecessary re-identification, decryption, or de-tokenisation whenever possible.”

Data protection is a function with an inverse: protect something and get exactly one unique output. Re-identify that output and always receive the original input.

The relational integrity is maintained and relational algebra on the protected data can be performed without spending the cost or time to first re-identify that data.

The ability to avoid re-identification can be taken further via the concept of partial protection.

Partial protection avoids the cost and increases performance beyond that of full protection by removing data sensitivity while still allowing more types of authorised use. 

The third method that can be used to reduce cost and increase performance is employing stateless key management.

Encryption requires the use of a security key for every different access policy.

And, there are often thousands of granular access policies running within an enterprise.

Stateless key managers generate encryption keys for authenticated users on demand.

If a user needs a key that protected data 10 years ago, a stateless key manager has no trouble delivering that key today.

And, stateless key managers do not have an upper limit on the number of keys that may be in use at any point in time.

If an enterprise needs 10 million keys to protect its Internet of Things, a stateless key manager can handle the load.

And a stateless key manager integrates with existing directory authentication services, avoiding the need for dedicated staff.

Atrash adds, “Organisations should keep in mind that judicious use of data security does reduce its cost and increase its performance.

"Avoiding re-identification, employing partial protection, and focusing on key management cost of ownership are long-term methods for efficient implementation of a data security practice.”

Bitglass appoints new cloud, business development leaders
The cloud security company has appointed vice presidents for worldwide channels and worldwide business development.
Ping Identity offerings accelerates cloud MFA and SSO adoption
90% of respondents trust MFA as an effective security control to protect identity data in public clouds, yet only 60% of organisations have formally adopted it.
Trend Micro introduces cloud and container workload security offering
Container security capabilities added to Trend Micro Deep Security have elevated protection across the DevOps lifecycle and runtime stack.
Veeam joins the ranks of $1bil-revenue software companies
It’s also marked a milestone of 350,000 customers and outlined how it will begin the next stage of its growth.
Veeam enables secondary storage solutions with technology partner program
Veeam has worked with its strategic technology alliance partners to provide flexible deployment options for customers that have continually led to tighter levels of integration.
Veeam Availability Orchestrator update aims to democratise DR
The ability to automatically test, document and reliably recover entire sites, as well as individual workloads from backups in a completely orchestrated way lowers the total cost of ownership (TCO) of DR.
EXCLUSIVE: Forcepoint global channel chief talks strategy
As a solution sold 100% via the channel, cybersecurity solutions company Forcepoint places a strong emphasis on its partner relationships.
Salesforce continues to stumble after critical outage
“To all of our Salesforce customers, please be aware that we are experiencing a major issue with our service and apologise for the impact it is having on you."