{"id":124836,"date":"2020-09-14T10:46:23","date_gmt":"2020-09-14T17:46:23","guid":{"rendered":"https:\/\/www-cloudian-com.go-vip.net\/products\/security-features-copy\/"},"modified":"2023-03-03T11:21:40","modified_gmt":"2023-03-03T18:21:40","slug":"security","status":"publish","type":"page","link":"https:\/\/cloudian.com\/de\/solutions\/security\/","title":{"rendered":"Security"},"content":{"rendered":"

[vc_row css=”.vc_custom_1598994710307{padding-top: 15px !important;}”][vc_column][vc_column_text]<\/p>\n

When It Comes to Data Storage Security, You Can Afford the Best.<\/h2>\n

[\/vc_column_text][\/vc_column][\/vc_row][vc_row css=”.vc_custom_1598994710307{padding-top: 15px !important;}”][vc_column width=”2\/3″][vc_column_text css=”.vc_custom_1643738262112{margin-bottom: -1px !important;padding-bottom: 5px !important;}”]\"ransomwareRansomware attacks were the cause of 41% of the cyber-insurance claims filed over the first six months of 2020.* In this age of rampant malware and more remote work than ever, security may be the most important factor in your data storage decision.<\/p>\n

Not all storage is the same.<\/strong><\/p>\n

Cloudian offers the most complete array of cyber-security certifications found in object storage.<\/strong><\/a>\u00a0Get the best\u2026and save money with the industry\u2019s lowest total costs (up to 2\/3 less), whether you\u2019re looking for\u00a0flash or disk<\/a>.<\/p>\n

Read on to find out the long list of government and\u00a0third-party agencies<\/a>\u00a0who have tested our security and why you and your cyber-security insurer can trust it.<\/p>\n

*Cyberscoop, September 2020<\/a><\/p>\n

[\/vc_column_text][\/vc_column][vc_column width=”1\/3″ css=”.vc_custom_1602027092846{padding-bottom: 25px !important;}”][vc_column_text css=”.vc_custom_1602028445882{margin-bottom: -1px !important;}”]\"security<\/a>[\/vc_column_text]

Download the eBook<\/span><\/a><\/div>[\/vc_column][\/vc_row][vc_row full_width=”stretch_row” css=”.vc_custom_1601398664771{padding-bottom: 5px !important;background-color: #f2f5f8 !important;}”][vc_column][vc_column_text]<\/p>\n

Cloudian HyperStore Data Security Features<\/strong><\/h2>\n

[\/vc_column_text][\/vc_column][\/vc_row][vc_row css=”.vc_custom_1600109721607{padding-bottom: 5px !important;}”][vc_column width=”7\/12″][vc_column_text]<\/p>\n

Data Immutability \/ Ransomware Protection<\/h3>\n

Protect your data from deletion or encryption with S3 Object Lock \/ WORM<\/a> (write once, read many) functionality. Once Object Lock is enabled, your data is made immutable and cannot be altered or deleted until the policy-defined retention period is met. Ransomware cannot encrypt the data. HyperStore is hardened by the use of HyperStore Shell (HSH) and RootDisable, securing the solution at the system level, even disabling root access to make the solution impregnable. Similar solutions typically have porous root access leaving system-level breaches possible. This is a hardened solution, verified in government testing, and is certified compliant with the non-rewritable, non-erasable storage requirements of\u00a0 SEC Rule 17a-4(f)<\/a>.[\/vc_column_text][\/vc_column][vc_column width=”5\/12″ css=”.vc_custom_1604331894464{padding-top: 55px !important;}”][vc_column_text]\"object<\/a>[\/vc_column_text][\/vc_column][\/vc_row][vc_row full_width=”stretch_row” css=”.vc_custom_1600109971245{padding-top: 10px !important;padding-bottom: 25px !important;background-color: #f2f5f8 !important;}”][vc_column width=”1\/3″ css=”.vc_custom_1600109992456{padding-top: 50px !important;}”][vc_column_text]\"certifications\"<\/a>[\/vc_column_text][\/vc_column][vc_column width=”2\/3″ css=”.vc_custom_1600109737081{padding-top: 25px !important;}”][vc_column_text]<\/p>\n

Security Certifications<\/h3>\n

Cloudian offers the most complete array of security certifications<\/a> found in object storage.<\/p>\n

Common Criteria Certification with EAL2 designation:<\/strong> Validates that HyperStore meets the stringent testing and technical requirements for security mandated by the U.S. National Security Agency (NSA) along with 25 other governments worldwide. HyperStore is one of only two object storage platforms to achieve this.<\/p>\n

FIPS 140-3 Data Encryption Validation:<\/strong> NIST awarded Cloudian\u2019s FIPS 140-3 Level 1 validation, signifying that HyperStore data encryption methods have been independently reviewed and tested.<\/p>\n

HyperStore is also certified to meet the requirements of SEC Rule 17a-4(f)<\/a>, CFTC 17 C.F.R. \u00a7 1.31<\/a>, FINRA 4511c, IDW PS 880 (German) and OR \u00a7\u00a7 957ff (Swiss) regulations, and meets the data sanitization standards specified by NIST 800-88.[\/vc_column_text][\/vc_column][\/vc_row][vc_row css=”.vc_custom_1600109890313{padding-top: 20px !important;padding-bottom: 5px !important;}”][vc_column width=”7\/12″][vc_column_text]<\/p>\n

Secure Multi-Tenancy<\/h3>\n

Securely share a single storage environment among multiple users with multi-tenancy. HyperStore\u2019s advanced identity and access-management features allow system administrators to provision and manage groups and users, define service classes, and configure billing and charge-back policies. Multiple credentials per user are also supported. Ensure that service levels are met with group and user-level quality of service (QoS) controls.[\/vc_column_text][\/vc_column][vc_column width=”5\/12″ css=”.vc_custom_1600109737081{padding-top: 25px !important;}”][vc_column_text]\"multi-tenancy\"[\/vc_column_text][\/vc_column][\/vc_row][vc_row full_width=”stretch_row” css=”.vc_custom_1600109971245{padding-top: 10px !important;padding-bottom: 25px !important;background-color: #f2f5f8 !important;}”][vc_column width=”1\/4″ css=”.vc_custom_1600111486292{padding-top: 80px !important;}”][vc_column_text]\"NIST\"[\/vc_column_text][\/vc_column][vc_column width=”3\/4″ css=”.vc_custom_1600109737081{padding-top: 25px !important;}”][vc_column_text]<\/p>\n

Data Encryption: Data-at-Rest<\/h3>\n

To protect stored data, HyperStore employs AES-256 encryption, the specification established by the U.S. National Institute of Standards and Technology. HyperStore can perform granular encryption at a bucket or object level using a system-generated encryption key (regular SSE) or a customer-provided and managed encryption key (SSE-C). The object upload and download requests are securely submitted using HTTPS, and the system does not store a copy of the encryption key. You may also employ a third-party Key Management System to generate and manage keys (KMS).[\/vc_column_text][\/vc_column][\/vc_row][vc_row css=”.vc_custom_1600111000520{padding-bottom: 15px !important;}”][vc_column width=”7\/12″][vc_column_text]<\/p>\n

Data Encryption: Data-in-Flight<\/h3>\n

The HyperStore system supports the TLS 1.2 and 1.3 protocols, standards established by the Internet Engineering Task Force. These allow for encrypted communications between HyperStore and S3 clients. HyperStore employs HTTPS connections with either a 3rd party CA certificate or a self-signed certificate.[\/vc_column_text][\/vc_column][vc_column width=”5\/12″ css=”.vc_custom_1600110965561{padding-top: 75px !important;}”][vc_column_text]\"IETF\"[\/vc_column_text][\/vc_column][\/vc_row][vc_row full_width=”stretch_row” css=”.vc_custom_1600109971245{padding-top: 10px !important;padding-bottom: 25px !important;background-color: #f2f5f8 !important;}”][vc_column width=”1\/4″ css=”.vc_custom_1600109992456{padding-top: 50px !important;}”][vc_column_text]\"Active[\/vc_column_text][\/vc_column][vc_column width=”3\/4″ css=”.vc_custom_1600109737081{padding-top: 25px !important;}”][vc_column_text]<\/p>\n

Active Directory \/LDAP Authentication<\/h3>\n

HyperStore supports integration with one or more external Active Directory (AD) or Lightweight Directory Access Protocol (LDAP) systems to remotely authenticate and allow access to the Cloudian Management Console. Support can be enabled on a per-group basis, with the ability to use different groups and multiple AD or LDAP servers for authentication, or all LDAP-enabled groups leveraging the same LDAP server.[\/vc_column_text][\/vc_column][\/vc_row][vc_row css=”.vc_custom_1600111000520{padding-bottom: 15px !important;}”][vc_column width=”7\/12″][vc_column_text]<\/p>\n

Identity Access Management (IAM)<\/h3>\n

HyperStore provides selective support for the Amazon Identity and Access Management (IAM) API. This support enables each HyperStore user to create IAM groups and IAM users within their own account. The user can then grant IAM user permissions for specific actions (i.e. reading or writing objects in a bucket or buckets). All S3 object data created by IAM users belong to the parent HyperStore (root) user account. The HyperStore parent user can delete IAM users without deleting any S3 object data.[\/vc_column_text][\/vc_column][vc_column width=”5\/12″ css=”.vc_custom_1600110965561{padding-top: 75px !important;}”][vc_column_text]\"ID[\/vc_column_text][\/vc_column][\/vc_row][vc_row full_width=”stretch_row” css=”.vc_custom_1600109971245{padding-top: 10px !important;padding-bottom: 25px !important;background-color: #f2f5f8 !important;}”][vc_column width=”1\/4″ css=”.vc_custom_1600109992456{padding-top: 50px !important;}”][vc_column_text]\"emblem\"[\/vc_column_text][\/vc_column][vc_column width=”3\/4″ css=”.vc_custom_1600187270817{padding-top: 65px !important;}”][vc_column_text]<\/p>\n

Data Spill Protection<\/h3>\n

Cloudian HyperStore Secure Delete handles data spills while exceeding the NIST Special Publication 800-88-r1. Secure Delete can be set for \u201calways-on\u201d or \u201calways off.\u201d When a delete occurs, Secure Delete overwrites all blocks on all nodes that contain the object \u2014 with a method that exceeds the NIST 800-88 mandate of 0\u2019s written three times \u2014 and then the file is deleted from disk. The Secure Delete process can be audited and verified by examining delete transactions in cloudian-hyperstore-request-info.log.[\/vc_column_text][\/vc_column][\/vc_row][vc_row css=”.vc_custom_1601399795704{padding-top: 20px !important;padding-bottom: 15px !important;}”][vc_column width=”2\/3″][vc_column_text css=”.vc_custom_1601399398266{margin-bottom: -1px !important;}”]<\/p>\n

Hardened Solution<\/strong><\/h2>\n

Cloudian HyperStore SEC17a-4 Cohasset Assessment Report<\/h3>\n

\"compliance<\/p>\n

Data immutability verified in US Government certification testing<\/strong>
\nGet the Cohasset Associates Compliance Assessment to learn how Cloudian HyperStore, when properly configured, retains records requiring time-based retention in compliance with the recording and non-rewritable, non-erasable storage of electronic records of SEC Rule 17a-4(f). Additionally, the assessed capabilities of HyperStore meet the principles-based requirements of CFTC Rule 1.31(c)-(d).[\/vc_column_text]

Get the Assessment Report<\/span><\/a><\/div>[\/vc_column][vc_column width=”1\/4″ css=”.vc_custom_1600110965561{padding-top: 75px !important;}”][vc_column_text]\"SEC17a-4[\/vc_column_text][\/vc_column][vc_column width=”1\/12″][\/vc_column][\/vc_row][vc_row full_width=”stretch_row” css=”.vc_custom_1602018607950{padding-bottom: 15px !important;background-color: #f2f5f8 !important;}”][vc_column width=”1\/4″ css=”.vc_custom_1602018615294{padding-top: 60px !important;}”][vc_column_text css=”.vc_custom_1602014548965{margin-bottom: -1px !important;}”]\"security[\/vc_column_text]
Download eBook<\/span><\/a><\/div>[\/vc_column][vc_column width=”3\/4″][vc_column_text]<\/p>\n

Tackling Data Security and Compliance Challenges<\/strong><\/h3>\n

Three questions every CIO should ask about their data storage security<\/strong><\/p>\n

Data security is complicated. Compliance with security regulations has never been more important than it is today. It takes a lot of work to ensure your organization has a solid security program in place. How can you ensure you\u2019re doing everything you can to protect your organization\u2019s data? It begins by asking good questions and pressing for clear answers\u2014from your staff, your partners, and your service providers.<\/p>\n

In this white paper, we exam three important security questions every CIO should ask about your data storage platform and why getting clear answers to each one matters.<\/p>\n

1. How are we protecting data in-flight and data-at-rest?<\/strong>
\n2. Can our data be made immutable or tamperproof?<\/strong>
\n3. Does our data storage architecture meet our compliance requirements?<\/strong>[\/vc_column_text][\/vc_column][\/vc_row][vc_row full_width=”stretch_row” css=”.vc_custom_1602014591772{padding-bottom: 40px !important;}”][vc_column width=”2\/3″][vc_column_text]<\/p>\n

\"hyperiq<\/strong><\/h3>\n

Try Cloudian free in your data center for 45 days, and see how easy it is to build your own private cloud.<\/strong><\/h3>\n

Download the full-featured free trial of Cloudian\u00ae software and install it on any commodity hardware to build and test a public, private, or hybrid cloud solution.<\/p>\n

Free Trial includes:<\/strong><\/p>\n