« First...102030...1,7541,7551,7561,7571,758...1,7701,7801,790...Last »

Why Performance is Important to Cloud Security and Lower Encryption Tax Rate – Read IT Quik

Posted on by

Although not as high as over the last decade, security of data in the cloud remains a top concern for enterprises deploying into cloud environments, especially public. As native and third-party security solutions emerge to resolve the majority of concerns, another variable in the realm of cloud security that needs to be considered is performance.

Of course, the first domain of any security solution is just thatsecurity. But other variables need to be weighed as part of the decision on which tools to utilize. These variables include integration, performance, usability, navigation, compatibility, etc. In this article, well discuss performance metrics and concerns that should be considered as part of your acquisition decision.

In order for security to be effective, it must be practical. Many will remember the cumbersome use of early X.509 messaging or the lag and steps required with RSA tokens. Cloud technology is purpose-built for fast, flexible, and efficient operations. Similarly, solutions used to secure the cloud must be quick, seamless, and user-friendly in order to match or exceed the performance of the services theyre designed to secure. There are many cloud security solutions out there, including security information and event management (SEIM), advanced threat protection (ATP), and identity and access management (IAM) to name a few, but here we will focus on the topic of encryption and key management.

Encryption is the foundation of an effective cybersecurity strategy, especially for public cloud deployments. The majority of users view encryption as a binary functionits on (encrypting) or off (no encryption), but encryption needs to be considered under a very detailed performance light. Encryption requires time and resources (CPU and memory) to convert data from plain text to cipher textwhat I often refer to as an encryption taxso you need to ensure that your tax rate is as low as possible.

Here are some factors you should consider to lower your tax rate:

Read more:
Why Performance is Important to Cloud Security and Lower Encryption Tax Rate - Read IT Quik

Black Duck Teams Up with Pivotal to Secure and Manage Open Source Cloud-Native Applications for the Enterprise – Business Wire (press release)

Posted on by

BURLINGTON, Mass.--(BUSINESS WIRE)--Black Duck, the global leader in automating the security and management of open source software, today announced a new technology collaboration with Pivotal and the launch of its Black Duck Hub product as an integrated service for Pivotal Cloud Foundry, one of the world's most powerful cloud-native platforms. This is the first open source-focused security management integration with Pivotal Cloud Foundry, enabling enterprise customers to embrace open source in their applications with automated visibility, intelligence, and control.

Black Duck and Pivotal have collaborated to integrate Black Duck Hub and Pivotal Cloud Foundry to deliver a Secure DevOps process and user experience for building and deploying applications to Pivotal Cloud Foundry.

Using Black Duck Hub, enterprise customers can automatically identify all the open source components; detect and analyze known security vulnerabilities, compliance issues, and code quality risks; and enable policy management to control risks and their remediation. Additionally, Hub dynamically monitors the scanned code and provides alerts on newly discovered vulnerabilities or policy violations. Enterprise customers can also use Hub to access Black Duck KnowledgeBase, the worlds most comprehensive data store of open source components and risk intelligence.

Open source comprises 80 to 90 percent of the components in a modern cloud-native application. Integration of Black Duck Hub with Pivotal Cloud Foundry provides automated visibility and control into that open source, said Black Duck CEO Lou Shipley. This helps increase enterprises confidence to increase their production deployment of cloud-native applications.

Fortune 2000 companies are facing tremendous pressure to build and deliver cloud-native applications - faster, on a larger scale, and at lower cost, said Nima Badiey, Head of Business Development, Pivotal Cloud Foundry. Combining Black Duck Hub with Pivotal Cloud Foundry helps our customers automate the security and licensing processes in their application deployment pipelines, enabling agility and innovation at cloud-native speeds.

Availability

In addition to the new integrated solution for Pivotal Cloud Foundry users, Black Duck today announced that Pivotal has become a Black Duck Hub customer for Pivotals internal use. Pivotal uses Hub as part of its internal Pivotal Cloud Foundry development and security processes to help secure and manage open source components in the Cloud Foundry project.

About Black Duck Software Organizations worldwide use Black Ducks industry-leading products to automate the process of securing and managing open source software, eliminating the pain related to security vulnerabilities, compliance and operational risk. Black Duck is headquartered in Burlington, MA, and has offices in San Jose, CA, Vancouver, London, Belfast, Northern Ireland, Frankfurt, Hong Kong, Tokyo, Seoul and Beijing. For more information, visit http://www.blackducksoftware.com.

View original post here:
Black Duck Teams Up with Pivotal to Secure and Manage Open Source Cloud-Native Applications for the Enterprise - Business Wire (press release)

TrueNAS X10: iXsystems’ open source storage contender – TechTarget

Posted on by

Open-source-based server designer iXsystems Inc. today broadened its enterprise storage portfolio with an entry-level TrueNAS array.

The San Jose, Calif., vendor introduced the TrueNAS X10 hybrid array as a complement to its Z Series midrange family that launched three years ago. It also sells a line of FreeNAS appliances for small businesses and home offices.

All iXsystems arrays run the OpenZFS file system with at-rest data encryption, inline compression and deduplication, replication and delta-based snapshots. OpenZFS is the open source successor to the ZFS file system originally developed by Sun Microsystems, which Oracle acquired in 2010 for $7.4 billion.

Privately held iXsystems has been in the server business since 1996, expanding to storage in 2009. The company doesn't publicly disclose revenues, but claimed storage sales are expected to spike about 200% by 2018.

TrueNAS X10 is a 2U chassis that supports 12 hot-swappable SAS HDDs connected via 10 Gigabit Ethernet. Customers can buy a single controller with 20 TB of raw disk capacity starting at $5,500. For high availability, a dual-controller chassis is recommended that starts at $20,000 for 120 TB. Storage scales to 360 TB in 6U with two fully populated SAS expansion shelves.

The scale-up architecture nicely balances cost and performance, said Scott Sinclair, a storage analyst at Enterprise Strategy Group Inc. in Milford, Mass.

"This is not a server architecture where you need three boxes for resiliency. They built the hardware, they fitted the box and they use their open source software-defined storage to help you build a traditional array deployment. It's got a dual controller and 120 TB of storage for under $20,000, which is pretty nice," Sinclair said.

The unified storage arrays merge RAM and solid-state drives for caching with hard disk drives for storage. The system-on-a-chip hardware is based on an Intel Pentium Xeon D-1531 six-core CPU.

The storage products integrate iXsystems' FreeNAS converged software on certified server hardware. FreeNAS is available as a download and also as a bundled stack on FreeNAS-branded hardware appliances.

FreeNAS is built atop stripped-down FreeBSD code and supports the FreeBSD-licensed bhyve hypervisor. The system also is certified for Citrix XenServer and VMware ESXi.

Projected use cases for the new arrays include backup, big data storage and file sharing. It taps into a swath of underserved small and midsize business customers, said Steve Wong, the iXsystems director of storage product management.

"Until now, we have not had a TrueNAS product at the lower end of the market for customers that need continuous data availability and uptime. We have had a lot of customers that value the capabilities of our other TrueNAS arrays, but the price has precluded them from buying," Wong said.

Wong said iXsystems expects at least half of FreeNAS X10 customers to opt for the 2U high availability option.

"We see it competing with Dell EMC VNX and Unity, as well as NetApp FAS2600 Series and HPE's [Hewlett Packard Enterprise] MSA SAN products," he said. "We also expect it to compete against rackmount systems from Qnap, Drobo and Synology."

Competition also could come from software-defined storage vendors, particularly OpenStack deployments for building private cloud storage.

"The challenge for iXsystems is going up against the big-name storage vendors," Sinclair said. "Those customers tend to be a different type of buyer than those in the SMB, who might be willing to go with a lesser-known vendor. The question is whether iXsystems can sell enough boxes at that price to achieve the necessary scale that makes business sense."

Other iXsystems include TrueNAS Z20 with 400 TB starting at $25,000, TrueNAS Z30 with 1.1 PB starting at $30,000, and the high-end TrueNAS Z35 array that starts at $40,000 and scales to 4.8 PB. The vendor also markets TrueRack rack-scale converged infrastructure to large data centers, combining its storage and servers with third-party networking switches.

Slowly but surely, open source storage gains acceptance

Is object storage really about to supplant scale-out NAS?

Storage moves toward software-defined memory

Here is the original post:
TrueNAS X10: iXsystems' open source storage contender - TechTarget

Sonatype 2017 State of the Software Supply Chain Report Reveals … – Business Wire (press release)

Posted on by

FULTON, Md.--(BUSINESS WIRE)--Sonatype, the leader in software supply chain automation, today announced the release of its third annual State of the Software Supply Chain Report. This years report highlights risks lurking within open source software components and quantifies the empirical benefits of actively managing software supply chain hygiene.

Organizations that are actively managing the quality of open source components flowing into production applications are realizing a 28 percent improvement in developer productivity, a 30 percent reduction in overall development costs, and a 48 percent increase in application quality. Furthermore, analysis of more than 17,000 applications reveals that applications built by teams utilizing automated governance tools reduced the percentage of defective components by 63%.

Conversely, organizations failing to manage software supply chains are unwittingly releasing vulnerable applications into production, wasting thousands of hours on rework and bug fixes, and facing increased liability due to gross negligence.

Additional key findings of the 2017 State of the Software Supply Chain report include:

Consumption of open source components is growing on a massive scale

Open source component suppliers remain slow to fix vulnerabilities

Number of downloaded components with known vulnerabilities is slightly decreasing

The regulatory landscape is rapidly changing

Supporting Quotes

Wayne Jackson, CEO, Sonatype Companies are no longer building software applications from scratch, they are manufacturing them as fast as they can using an infinite supply of open source component parts. However, many still rely on manual and time consuming governance and security practices instead of embracing DevOps-native automation. Our research continues to show that development teams managing trusted software supply chains are dramatically improving quality and productivity.

Mark Driver, Felix Gaehtgens, Mark ONeill, Gartner, May 2017 report Managing Digital Trust in the Software Development Life Cycle By 2020, 50% of organizations will have suffered damage caused by failing to manage trust in their, or their partners, software development life cycles (SDLC) causing revenue loss of more than 15%. Application leaders responsible for modernizing application development should re-evaluate the SDLC in the form of a trusted software supply chain, with varied levels of trust.

About the State of the Software Supply Chain Report

The 2017 State of the Software Supply Chain Report blends a broad set of public and proprietary data with expert research and analysis. This years report extends beyond Java data to include supply chain findings from JavaScript, NuGet, Python, and Docker ecosystems.

Additional Resources

About Sonatype

Sonatype is the leading provider of DevOps-native tools to automate modern software supply chains. As the creators of Apache Maven, the Central Repository, and Nexus Repository, Sonatype pioneered componentized software development and has a rich history of supporting open source innovation. Today, more than 120,000 organizations depend on Sonatypes Nexus platform to govern the volume, variety, and quality of open source components flowing into modern software applications. Sonatype is privately held with investments from New Enterprise Associates (NEA), Accel Partners, Hummer Winblad Venture Partners, Morgenthaler Ventures, Bay Partners and Goldman Sachs. Learn more at http://www.sonatype.com.

Here is the original post:
Sonatype 2017 State of the Software Supply Chain Report Reveals ... - Business Wire (press release)

Infotecs At The Forefront Of Quantum Cryptography – Broadway World

Posted on by

Infotecs, an internationally known IT security and threat intelligence provider, is developing quantum encryption technology to exchange encryption keys at very high data volumes.

Quantum computing has the potential to revolutionize modern computing by attaining computing speeds previously thought impossible. However, computing that is significantly faster would also make it easy to break many of todays encryption techniques. One reason for this is that if encryption keys are used too frequently, attackers can find statistical patterns that allow decryption of the data. The solution to that problem is to change keys very frequentlysometimes as much as several times per second.

Infotecs has invested roughly 4.8 million dollars over three years in the development of a post-quantum cryptography (PQK) technology that manages key exchange. Infotecs, in cooperation with international scientific institutions, is working to develop a marketable, efficient, but affordable solution for the construction of a secure quantum data network.

"The IT security sector is facing an extremely difficult challenge because of increasingly high-performance computer systems," comments Aleksandr Tkachev, General Manager of Infotecs Americas. "Our cryptographers have been working intensively since autumn 2016 on the development of a post-quantum cryptography solution to provide our customers with a market-ready encryption technology that meets the changing future requirements for secure, encrypted communication."

About Infotecs As a leading international IT security provider and an experienced specialist in software-based VPN solutions, Infotecs has been developing peer-to-peer ViPNet technology since 1991 to provide more security, flexibility and efficiency than other security products that are common to the market. The ViPNet Security and Threat Intelligence Platform provides complete security for all enterprise environments in a single cost-effective solution. As the only technology, ViPNet supports real point-to-point security and is therefore considered highly secure. The encryption solution is scalable, flexible, and easy to implement and manage. ViPNet can also be seamlessly integrated into existing network infrastructures, enabling customers to find the right balance between high security, low complexity and low risk. More than 1,000,000 endpoints, company locations and servers have been securely connected to each other using ViPNet - supported by experienced crypto specialists from our IT development and support team, as well as a strong network of partners. Further information on the company can be found at http://www.infotecs.us.

Contact Infotecs Americas James Quinn Vice-President, Strategic Security Architecture 77 Water Street, 8th Floor New York, NY 10005 (917) 362-4284 james.quinn(at)infotecs(dot)us

See the original post here:
Infotecs At The Forefront Of Quantum Cryptography - Broadway World

Kudelski Security to Present on Automated Testing of Crypto Software at Black Hat USA 2017 – PR Newswire (press release)

Posted on by

Experts from Kudelski Security will also dive into topics such as cloud security and orchestration, managed attacker deception, advanced threat intelligence, designing IoT security and cryptography during a series of Debriefing Sessions hosted at the Four Seasons Hotel.

Aumasson and Romailler's presentation will focus on a new and efficient approach to systematic testing of cryptographic software: differential fuzzing. Unlike general purpose software fuzzing such as afl, differential fuzzing doesn't aim to find memory corruption bugs (although they might come as a by-product), but to find logic bugs. Compared to test vectors, differential fuzzing provides greater code coverage and compared to formal verification, differential fuzzing is easier to apply, both for testers and developers. Aumasson and Romailler will present this session at both Black Hat and BSides LV. Romailler will also present it at Crypto & Privacy Village within DEF CON 25.

While at Black Hat 2017, Kudelski Security will also be hosting a Crypto Challenge, a series of after show Debriefs Sessions and a party at the House of Blues' Foundation Room within Mandalay Bay. Details include:

Media and analysts interested in meeting with Kudelski executives at the show should contact kudelskipr@teamlewis.com.

About Kudelski SecurityKudelski Security is the premier advisor and cybersecurity innovator for today's most security-conscious organizations. Our long-term approach to client partnerships enables us to continuously evaluate their security posture to recommend solutions that reduce business risk, maintain compliance and increase overall security effectiveness. With clients that include Fortune 500 enterprises and government organizations in Europe and across the United States, we address the most complex environments through an unparalleled set of solution capabilities including consulting, technology, managed security services and custom innovation. For more information, visit http://www.kudelskisecurity.com.

Media Contact:John Van Blaricum Vice President, Global Marketing Kudelski Security +1 650 966 4320 john.vanblaricum@kudelskisecurity.com

View original content with multimedia:http://www.prnewswire.com/news-releases/kudelski-security-to-present-on-automated-testing-of-crypto-software-at-black-hat-usa-2017-300488871.html

SOURCE Kudelski Security

Home

Originally posted here:
Kudelski Security to Present on Automated Testing of Crypto Software at Black Hat USA 2017 - PR Newswire (press release)

Cryptocurrencies are crashing, but bitcoin isn’t falling as badly as the rest – Quartz

Posted on by

Cryptocurrency markets are crashing. Bitcoins price has fallen by about 20% in the last seven days, wiping out $7 billion of market value. But its doing better than other major cryptocurrencies like ether and ripple, which have lost 30% or more.

Bitcoins relative resilience in the current crash bolsters its status as the reserve currency of the cryptocurrency markets. Some $29.5 billion worth of bitcoin has been traded on global exchanges in the last month, compared to $26.3 billion worth of ethereum, according to data site Coin Marketcap. Not all traders are cashing out of ether into bitcoin, of course, the ether-Korean won currency pair is among the most actively traded in the last 24 hours, Coin Marketcaps data shows.

One indicator of bitcoins health relative to other cryptocurrencies is the so-called Bitcoin Dominance Index maintained by Coin Marketcap. It shows the total value of all bitcoin in circulation as a proportion of the value of all cryptocurrencies in circulation. As cryptos in general rallied this year, bitcoins dominance has fallen. But as markets have corrected in recent weeks, bitcoins dominance rose.

Bitcoin is still more than twice as valuable as ethereum, and about six times as valuable as Ripple. That gap could grow if the cryptomarket correction continues.

Read next: The strange mix of reasons why bitcoin has soared to all-time records

See more here:
Cryptocurrencies are crashing, but bitcoin isn't falling as badly as the rest - Quartz

Bitcoin slides below $2000 as cryptocurrency selloff continues – MarketWatch

Posted on by

The price of the digital currency bitcoin fell over the weekend, dropping below $2,000 and farther away from its June highs, part of a broad selloff in dozens of cryptocurrencies, including ether.

Bitcoin on Sunday traded as low as $1,836, according to news and research site CoinDesk, down about 8% on the day, and almost 40% from its high of $3,018 on June 11. Meanwhile, ether, the currency used on the Ethereum network, traded as low as $155 on Sunday, down about 60% from its high of $395 on June 13.

Prices were lower across the board on Sunday, most notably for the tokens created via the so-called initial coin offering, or ICO, process.

The selloffs are yet another stark reminder that for all the potential and promise in these new kinds of digital assets, they remain highly speculative trading vehicles. The markets around them are still relatively immature and illiquid, resulting in extremely volatile trading.

An expanded version of this report appears on WSJ.com.

Also popular on WSJ.com:

Can the most expensive indie move ever break even?

Elon Musk lays out worst-case scenario for AI threat.

See the original post here:
Bitcoin slides below $2000 as cryptocurrency selloff continues - MarketWatch

Are Cryptocurrencies Recovering or is This a Dead cat Bounce? – The Merkle

Posted on by

No one can say there is such a thing as a boring day in the world of Bitcoin and cryptocurrency. After the onslaught of price declines throughout the weekend, we kick off this Monday on a positive note. All currencies are seemingly recovering their losses. The Bitcoin price surpassed US$2,000 again, but it looks like Ethereum is the winner of the day so far. Other currencies all doing quite well too, for now.

Even though we are not a big fan of the term dead cat bounce, it accurately describes what is going on in the cryptocurrency world right now, by the look of things. The markets are showing signs of positive momentum, but there is no reason to get overly excited just yet. After all, the gains made today can easily be wiped out in an hour or two of bearish trading. This is especially true for the currencies showing large gains compared to yesterday.

Taking a closer look at the charts, we can see there is only one coin in the top 50 without a green number next to it right now. Overall, that is a positive sign for cryptocurrency as a whole. At the same time, people have to keep in mind these positive changes are a direct result of the Bitcoin price going up slowly. Should Bitcoin drop in value again, these short-term gains for all altcoins will be wiped out pretty quickly.

While it is good to see the Bitcoin price bounce back to above US$2,000, maintaining that position will be quite challenging. There is a lot of negative pressure on the market, which may push the price back to to the US$1,900 range in the coming hours. Such a retrace will effectively prove to be a tough time for any altcoin struggling as of late, including the likes of Ethereum and Dash.

Speaking of those two particular altcoins, Dash has seen its value climb by 13.52% over the past 24 hours. This is despite a trading volume of under US$50m, mind you. Ethereum, on the other hand, notes an 18.02% gain over the past 24 hours, thanks to a trading volume which even surpasses Bitcoins. Many people still hope to see ETH return to US$400, but for now, it is a struggle to remain above US$160.

Seeing the Ethereum trading volume surpass Bitcoins is not entirely surprising. Korea and China are trying to push the ETH price back up, yet their efforts are not wildly successful so far. In fact, the price on Bithumb denominated in US Dollars- is below the ETH/BTC price on Poloniex when converting it to USD. That is somewhat surprising, considering Korean exchanges often depict higher values for cryptocurrencies compared to Western markets.

It is still too early to tell if the cryptocurrency markets are effectively recovering. For all we know, this is just a temporary blip on the radar, which will be nullified before the day is over. It seems plausible to assume Bitcoin will have a tough time remaining above US$2,000 for an extended period of time. The markets remain volatile for quite some time to come, but there is always sunshine beyond the dip. No one needs to panic right now, as things will be alright in the end.

If you liked this article, follow us on Twitter @themerklenews and make sure to subscribe to our newsletter to receive the latest bitcoin, cryptocurrency, and technology news.

Continued here:
Are Cryptocurrencies Recovering or is This a Dead cat Bounce? - The Merkle

Cryptocurrency 101: Digital currencies soar in value, but subject to … – The Straits Times

Posted on by

Digital currencies like the bitcoin were once the preserve of programmers, geeks and digitally-savvy traders but they have made it to the mainstream, grabbing headlines for their soaring prices, flash crashes and more.

The numbers around these currencies can be baffling to most of us. Take a Bloomberg report last week about a cryptocurrency trader - who is known only by a string of numbers - whose US$55 million (S$75 million) on paper in the digi-currency ethereum became US$283 million in just over a month, a 413 per cent profit.

Wild swings like this are - and will be - the norm for cryptocurrencies, say experts, so anyone investing in them is in for a rocky ride.

But that in turn will attract risk-takers, so it is best to get a handle on just what this quirky corner of the finance world is all about.

"Cryptocurrency is a form of digital currency that uses cryptography to allow for the peer-to-peer exchange of value, without a third party such as a bank or a remittance company," notes Singapore University of Social Sciences (SUSS) Professor David Lee, whose areas of interest include digital currency and blockchain technology.

ST ILLUSTRATION: JASTER NGUI

He notes that Satoshi Nakamoto - either an actual programmer or a group of them using the name - invented the bitcoin so people can transfer value or currency among peers who do not necessarily trust one another, using a public ledger that is transparent to everyone.

The Financial Times explains: "When people invest in the bitcoin, the money is going into the underlying technology - known as blockchain - not the payment instrument itself."

It refers to the blockchain as "essentially a giant record book of all bitcoin transactions; it is to the bitcoin what the Internet is to e-mail".

And it is described as a decentralised network where every bitcoin transfer is verified, processed and written down, and comes with potential "to make economic interactions cheaper, faster and more secure".

INVESTING IN UNDERLYING TECH

When people invest in the bitcoin, the money is going into the underlying technology - known as blockchain - not the payment instrument itself.

THE FINANCIAL TIMES, saying the blockchain is "essentially a giant record book of all bitcoin transactions".

ASTRONOMICAL RETURNS

To put things into perspective, an investor who had invested just US$1,000 back in 2010 could have cashed out nearly US$51 million today.

MR SACHIN MITTAL, head of telecom, media and technology research at DBS Group Research, on the bitcoin, the most famous, valuable and oldest cryptocurrency.

Mr Sachin Mittal, head of telecom, media and technology research at DBS Group Research, says the bitcoin is the most famous, valuable and oldest cryptocurrency, although there are around 800 others.

Mr Yusho Liu, co-founder of CoinHako, which helps people buy and sell cryptocurrencies, notes that almost 48 per cent of the global cryptocurrency value is held in bitcoin while ethereum holds about 40 per cent of the market share.

Cryptocurrencies have come under the spotlight, with huge gains made by the bitcoin and ethereum, notes Mr Mittal.

The value of the bitcoin shot up about 155 per cent within the first six months of this year. A bitcoin was worth US$2,539 on July 10 this year, compared with five US cents in July 2010. "To put things into perspective, an investor who had invested just US$1,000 back in 2010 could have cashed out nearly US$51 million today," notes Mr Mittal.

Ethereum has risen 2,775 per cent, from US$8.39 to US$241 since the start of this year.

Many argue that the bitcoin and other cryptocurrencies have no intrinsic value and may be a perfect vehicle for forming a bubble, Prof Lee adds.

"To put it into perspective, with a US$40 billion market capitalisation for the bitcoin and US$100 billion for total cryptocurrency, this investible class is minute, compared with US$66.8 trillion for listed equity and US$48.2 trillion for gold."

However, he stresses: "Cryptocurrency is a very complex investment instrument. I would not advise anyone who has no knowledge of cryptocurrency to get involved at all.

"To start off, there are a lot of videos, books and papers written about the subject. One may also join Access - the Singapore Cryptocurrency and Blockchain Industry Association - to attend its talks and programmes to learn about cryptocurrency and the blockchain industry."

Read the original:
Cryptocurrency 101: Digital currencies soar in value, but subject to ... - The Straits Times


« First...102030...1,7541,7551,7561,7571,758...1,7701,7801,790...Last »