Story image

Micro Focus: How to reduce the cost of data security

10 May 2019

No information technology process is free.

There is always a cost; if not to the service consumer, then most definitely to the service provider. Data protection in the form of either encryption or tokenisation is no exception.

When these technologies are added to an existing IT process, costs go up, according to Micro Focus.

These can be direct costs, in the form of acquiring more equipment or software licences or spending more on operational costs, such as power and staff.

Or the costs can be indirect, for example, taking more time to complete an IT process as data protection is CPU-intensive.

While each data protection operation takes microseconds, in a large organisation protecting petabytes of data, these all add up.

Micro Focus Australia and New Zealand enterprise security platforms director George Atrash says,  “The question then becomes how organisations can mitigate these direct and indirect costs. The answer is by reducing the number of times a data protection IT process needs to run.

“This can be done by protecting data at the application level, avoiding decryption when possible, and reducing the life cycle key management cost.”

One of the benefits of protecting data at the application level is protection can be applied only once. Persistent and pervasive data benefits most from application-level protection as the data need not be protected and re-identified when it moves throughout the enterprise.

This avoids security gaps, as well as the cost of repeated protect/unprotect cycles.

So, while application-level data protection may cost more during deployment, this method has lower operational cost.

Atrash says, “This means that one method of reducing cost and increasing overall system performance is avoiding unnecessary protection.

“The second method is to avoid unnecessary re-identification, decryption, or de-tokenisation whenever possible.”

Data protection is a function with an inverse: protect something and get exactly one unique output. Re-identify that output and always receive the original input.

The relational integrity is maintained and relational algebra on the protected data can be performed without spending the cost or time to first re-identify that data.

The ability to avoid re-identification can be taken further via the concept of partial protection.

Partial protection avoids the cost and increases performance beyond that of full protection by removing data sensitivity while still allowing more types of authorised use. 

The third method that can be used to reduce cost and increase performance is employing stateless key management.

Encryption requires the use of a security key for every different access policy.

And, there are often thousands of granular access policies running within an enterprise.

Stateless key managers generate encryption keys for authenticated users on demand.

If a user needs a key that protected data 10 years ago, a stateless key manager has no trouble delivering that key today.

And, stateless key managers do not have an upper limit on the number of keys that may be in use at any point in time.

If an enterprise needs 10 million keys to protect its Internet of Things, a stateless key manager can handle the load.

And a stateless key manager integrates with existing directory authentication services, avoiding the need for dedicated staff.

Atrash adds, “Organisations should keep in mind that judicious use of data security does reduce its cost and increase its performance.

"Avoiding re-identification, employing partial protection, and focusing on key management cost of ownership are long-term methods for efficient implementation of a data security practice.”

Atos develops edge server with security in mind
The BullSequana Edge server is able to securely manage and process IoT data close to the source of data generation so that it is treated immediately.
Sony and Microsoft to explore strategic partnership
“Our partnership brings the power of Azure and Azure AI to Sony."
Google puts Huawei on the Android naughty list
Google has apparently suspended Huawei’s licence to use the full Android platform, according to media reports.
Fujitsu and Veeam partner to offer simplified backup and recovery
This new partnership promises the increased availability of data and faster recovery from disasters and unplanned system downtime.
AAEON wins edge accolades at COMPUTEX 2019
AI edge and IoT network solutions manufacturer AAEON has picked up two accolades at the COMPUTEX d&i Awards 2019.
AI driving 'unprecedented' M&A growth
Breakthroughs in artificial intelligence are causing ‘unprecedented’ growth for mergers and acquisitions, as companies grapple for their share of an AI market that will be worth $190 billion by 2025.
Chorus partners with Nlyte, expands edge data centre offerings
Chorus announced today that it is going ahead with expanding its Chorus EdgeCentre Colocation product to three sites across New Zealand.
Schneider shares advice for solving edge computing challenges
Schneider Electric has shared the findings of a new whitepaper that delves into the issues of deploying IT at the edge.