Professional Documents
Culture Documents
Practitioner’s
Guide
to the Cloud
Maintaining Trust and Control in Virtualized
Environments with SafeNet’s
Trusted Cloud Fabric
TRUSTED CLOUD
FABRIC
A Security Practitioner’s
Guide to the Cloud
Maintaining Trust and Executive Summary- To fully capitalize on the strategic potential of the
cloud, enterprises will need to address a key challenge: security. With its
Control in Virtualized comprehensive, flexible, and modular security solutions, SafeNet enables
Environments with enterprises to overcome the security challenges posed by the cloud. The
SafeNet’s Trusted SafeNet Trusted Cloud Fabric enables enterprises to maximize security and
Cloud Fabric. control in the cloud, migrate to new cloud services with optimal flexibility,
and fully leverage the cloud’s business benefits.
Introduction
“Forrester fully expects to see Today, over 60% of enterprises, both large and small, plan to evaluate or pilot some type
the emergence of highly secure of cloud-enabled offerings within the next 18 months1. For many applications, such as
and trusted cloud services sales force automation, project management, and marketing automation, SaaS-based
delivery has become the de facto standard. Yet for many enterprises, initial cloud initiatives
over the next five years, during
represent a virtual drop in the bucket in terms of what is ultimately possible.
which time cloud security will
grow into a $1.5 billion market Take, for instance, the case of a large multi-national retailer that looks to migrate its
and will shift from being an virtual machines from internally sourced to cloud-based resources during the holiday
season. Given that 70% of its retail business is conducted during this four-week period,
inhibitor to an enabler of cloud
the company stands to substantially reduce its IT operational expense through the less-
services adoption.”
demanding months of the year—and save millions in the process.
—Forrester Research It is with this type of strategic initiative that enterprises will begin to realize the full value
of the cloud’s elasticity and cost benefits. However, for these visions to become a reality,
a significant challenge needs to be addressed: guaranteeing security, trust, and control in
the cloud. What precautions do cloud providers have in place to guard against breaches?
How can businesses ensure sensitive data isn’t inadvertently co-mingling with another
client’s records in a virtualized, multi-tenant environment? How do businesses ensure and
demonstrate compliance of their cloud deployments?
Enterprises pursuing a host of cloud initiatives today are wrestling with these issues, and,
as the strategic value of cloud initiatives increases, so too does the security imperative.
These heightened security demands will spawn significant effort and investment from
enterprises and the security vendors that serve them. That’s why Forrester estimates cloud
security will grow into a $1.5 billion market in the next five years2.
1 Gartner, “Hype Cycle for Cloud Computing, 2010”, David Mitchell Smith, July 27, 2010
2 Forrester, “Security And The Cloud: Looking At The Opportunity Beyond The Obstacle”, Jonathan Penn with
Heidi Shey, Christopher Mines, Chétina Muteba, October 20, 2010
A Security Practitioner’s Guide to the Cloud Whitepaper 2
The Solution: SafeNet’s Trusted Cloud Fabric
SafeNet delivers the industry’s most complete cloud fabric for virtualized environments,
SafeNet Information enabling enterprises to ensure trust throughout the lifecycle of enterprise data. The
Lifecycle Protection SafeNet Trusted Cloud Fabric enables enterprises to…
The SafeNet Trusted Cloud • Ensure security and compliance in the cloud. The SafeNet Trusted Cloud Fabric
Fabric is an extension represents a complete ecosystem of security solutions, weaving together persistent
of SafeNet Information protection, elastic encryption, anchored identity, and secured communication. With
Lifecycle Protection, a these capabilities, SafeNet enables customers to retain complete control over how
data is isolated, protected, and shared—even in multi-tenant cloud environments.
comprehensive framework
for securing data throughout • Take a practical migration path to the cloud. SafeNet offers a modular architecture
the information lifecycle. By that gives organizations the flexibility to migrate to the cloud in the most effective
extending trust and control and efficient manner, and according to their specific timeframes, business objectives,
and security policies. SafeNet’s Trusted Cloud Fabric enables businesses to tackle
when moving users, data,
their most pressing security challenges, both in the near term and in the long term—
systems, and applications
whether they’re looking to secure access to SaaS applications, encrypt storage in the
to virtualized environments, cloud, protect the communication links between private and public clouds, or address
SafeNet enables customers a host of other objectives.
to seamlessly integrate
• Fully leverage the benefits of the cloud. The SafeNet Trusted Cloud Fabric features
any cloud model into their
high performance solutions built specifically to support virtualized environments.
near-term and long-term In addition, SafeNet’s comprehensive solutions enable centralized governance and
technology and security management of sensitive data, applications, and systems across the data center and
strategies. the cloud. As a result, security teams can enjoy optimized administrative efficiency,
while businesses fully embrace cloud opportunities.
Secure Cloud-Based
Secure Virtual Machines Identities and Transactions
Secure Cloud-Based
Secure Access to SaaS Communications
On-premise
Salesforce.com
Federated SSO
to the cloud
Google Apps
User authenticates
using enterprise
identity
SafeNet Authentication
Secure Access for SaaS Manager (SAM)
The Mandate
Multi-factor authentication—whether through the use of one-time password (OTP) tokens,
The Benefits of the certificates, USB tokens, or smart cards—has grown increasingly critical as organizations
Trusted Cloud Fabric look to secure remote users’ access to corporate systems. As enterprises move increasingly
strategic business services to the cloud, security teams will need to leverage centralized
• Stay in control. Bring
private data center security mechanisms that accommodate both traditional remote access scenarios and cloud
and control to public and deployments.
private clouds.
• Eliminate compromise. The Solution
Boost security without With SafeNet Authentication Manager, customers can leverage a unified authentication
compromising the elasticity, infrastructure for both their on-premise and cloud-based services—providing a
scalability, or flexibility of centralized, comprehensive way to manage all access policies. When users try to access
cloud deployments. one of the enterprise’s cloud services, for example a SaaS service like Salesforce.
• Keep it simple. Get com or GoogleApps, they will authenticate using their existing SafeNet authentication
integrated, centralized mechanisms, such as smart cards, USB tokens, or OTP via the user’s mobile phone.
management,
administration, and
The Benefits
policy enforcement of
all domains—including SafeNet’s comprehensive authentication solutions make it easy for enterprises to
internal data center and maximize authentication security for SaaS applications. SafeNet solutions offer an
private, public, and hybrid unparalleled array of advantages for enterprises moving to the cloud:
clouds.
• Comprehensive platform. All SafeNet solutions that can all be managed through
• Make it persistent. Wrap
SafeNet Authentication Manager, a central management server that enables identity
protection around sensitive
federation, access controls, and strong authentication to both on-premise and SaaS
information throughout
its lifecycle, wherever it applications.
resides. • Deployment and form factor flexibility. SafeNet offers the broadest authentication
portfolio, including hardware tokens, software authentication, one-time password
Private
Public
On-premise
Hybrid
The Solution
SafeNet offers the most advanced and secure network-based HSMs, which are ideally
suited to the demands of virtual and cloud infrastructures. SafeNet HSMs, including
SafeNet Luna SA, offer an unparalleled combination of features—including central key and
policy management, robust encryption support, flexible integration, and more—that form
the basis of a secure cloud platform. In addition, SafeNet is the only HSM solution provider
to protect keys in hardware, ensuring that the cryptographic keys, paramount to securing
your application and sensitive information, never leave the confines of the hardware
appliance. Finally, SafeNet offers HSMs that feature FIPS- and Common Criteria-certified
storage of cryptographic keys.
The Benefits
By employing SafeNet HSMs for their cloud environments, enterprises can realize a range
of significant benefits:
• Realize long term scalability and flexibility. Each SafeNet HSM can support up to
100 clients and 20 partitions, enabling organizations to maximize the return on their
investment, while enjoying maximum scalability and flexibility to accommodate
changing business and technical requirements.
Virtual Machines
On-premise
ProtectV™Instance
Hypervisor
Virtual Server
In order to meet their regulatory or internal risk management policies, enterprises must
address a host of challenges posed by virtualized instances, including controlling privileged
administrator access, guarding against potential unlimited copying, overcoming the lack
of visibility and auditability, and mitigating the exposure of raw data. To address these
challenges and safeguard the sensitive information held in virtual servers, organizations
must go beyond simple user access controls and actively secure virtual servers.
The Solution
In order to mitigate the risk virtual servers can pose to sensitive data, SafeNet offers
ProtectV Instance, which enables organizations to encrypt and secure entire contents of
virtual servers, protecting these assets from theft or exposure. With ProtectV Instance,
data contained on the drive is secured, even offline and during instance activation.
ProtectV Instance provides a critical separation of duties for control of virtual servers and
adds the critical visibility needed to audit cloud-based servers.
The Benefits
By leveraging full disk encryption for virtual servers in the cloud, enterprises can maintain
ownership and control of their sensitive data—and so safeguard against the damage of
unauthorized theft or manipulation. Even if a drive is replicated, a virtual analog of a lost
Data
On-premise
ProtectV™Volume
Storage
Virtual Server
The Solution
SafeNet offers three solutions for securing cloud storage:
• SafeNet ProtectV Volume software enables enterprises to secure their files or folders
on cloud storage volumes.
• SafeNet for NetApp storage, enabling protection of files on NetApp storage systems.
• SafeNet ProtectFile, delivering capabilities for encrypting sensitive folders and files
kept on the hard drives of local and remote servers, network drives, file servers, and
virtualized systems, whether on or off premise.
The Benefits
With SafeNet, enterprises can efficiently leverage many of the benefits of cloud services,
while retaining effective security controls. With SafeNet solutions, organizations can
leverage the cloud for applications that would have previously been off limits from a
security standpoint. With SafeNet, enterprises can realize a range of benefits:
Database Application
Tokenization
Local crypto
and key caching
In order to satisfy both the economic benefits and security requirements of cloud-based
applications, organizations must satisfy several core requirements:
• Flexible and agile deployment. Given that organizations will use multiple cloud
providers, and change service providers over time, organizations need capabilities that
enable flexible data protection controls when migrating to different vendors.
The Solution
In order to maintain security and business continuity while moving into the cloud,
businesses can deploy DataSecure on premise and configure and provision ProtectApp
to secure virtualized applications that interact with such sensitive data as credit cards,
personally identifiable information, and more. ProtectApp is available in a wide variety of
development platforms to enable transparent integration, while the centralized control
via DataSecure provides the flexibility to work with multiple cloud providers. The on-
premise DataSecure platform is anchored as the root of trust for policy enforcement and
lifecycle key management. In the cloud, ProtectApp handles encryption and key caching
locally to deliver optimal performance. Because the data is protected as it is generated
The Benefits
With SafeNet, organizations can utilize SaaS and PaaS for their applications, while also
protecting their own customers’ data. In addition, the flexibility of the solution enables the
deployment of these protections with minimal operational overhead and maximum agility
to work with multiple cloud providers.
On-premise Private
The Solution
Today, SafeNet offers advanced layer 2 encryption solutions that enable organizations to
secure WAN communications—while eliminating the challenges and obstacles presented
by traditional IPsec encryption approaches. SafeNet Ethernet Encryptors provide the
administrative efficiency and optimized performance and bandwidth utilization that make
it ideally suited to an enterprise’s private cloud environment.
The Benefits
With SafeNet Ethernet Encryptors, organizations can ensure trusted communications
across all their cloud-based and internally hosted sites, and so gain a range of benefits:
• Boost user productivity. Through its high performance and reliability, SafeNet enables
authorized users to quickly and securely transfer communications, media, and other
data from the enterprise to the cloud—optimizing productivity.
• Lower costs. By eliminating costly overhead for expensive transport pipes and providing
full throughput, SafeNet offers immediate cost savings in the cloud and across the
enterprise. In addition, as cloud models evolve, businesses can easily add new devices
into their existing cloud environment. By centralizing and streamlining security
administration, management, and enforcement, SafeNet delivers significant cost
reductions.
Follow Us:
Contact Us: For all office locations and contact information, please visit www.safenet-inc.com
Follow Us: www.safenet-inc.com/connected
©2011 SafeNet, Inc. All rights reserved. SafeNet and SafeNet logo are registered trademarks of SafeNet.
All other product names are trademarks of their respective owners. WP (EN)-02.17.11