Storage Security Drivers
For most data-centric organizations, storage and information security will rank as top IT priorities for the foreseeable future. Storage security concerns have been driven by a number of emerging trends:

Regulatory compliance: In light of recent highprofile security breaches, federal and state governments have enacted regulations to protect consumer privacy, financial markets, and homeland security. Penalties for non-compliance include criminal prosecution, fines, and up to five years in prison.

Aggregation and replication: Networked storage environments have grown rapidly in recent years, aggregating terabytes of data into shared infrastructures. Backup and disaster recovery systems create multiple distributed copies of data, further complicating security and access controls. A single internal or external breach can compromise terabytes of data, and millions of customer records, resulting in brand damage, lost revenues, legal liability and regulatory penalties.

Insider threat: Around 50-80% of security attacks originate inside the firewall, and 67% of enterprises reported internal breaches during the last 12 months. Unfortunately, the vast majority of security investment has been focused on perimeter defenses such as firewalls and intrusion detection, and few measures have been deployed to protect internal systems. In fact, large organizations often grant "superuser" access to dozens or hundreds of insiders, with no auditing or accountability.

Indelible storage: Advanced forensic techniques make it nearly impossible to delete expired data from disks. Data written to disk in cleartext is vulnerable in a wide range of scenarios, ranging from disk disposal and repair, to legal discovery, to data in forward-deployed military applications.

Applications:

• Regulatory compliance
• Secure storage consolidation
• Secure backup and disaster recovery
• Decru CryptoShred™ secure file deletion
• Secure data sharing
• Secure outsourcing
• Tamper-proof access controls and auditing

NetApp-Decru Solutions
Network Appliance and Decru have developed a range of powerful and cost-effective solutions, with joint customers in sectors including financial services, semiconductors, healthcare, and government.

NetApp-Decru solutions enable military-grade security throughout the entire lifecycle of regulated and sensitive data, without compromising performance or simplicity. Decru DataFort™ storage security appliances have been officially qualified through rigorous testing with NetApp® FAS and NearStore®storage systems, including SnapLock™ data permanence functionality.

The NetApp-Decru platform supports security and compliance requirements for primary storage, secondary storage, storage consolidation, archiving, disaster recovery, outsourcing, file shredding, secure access controls and partner data sharing. NetApp and Decru products are deployed as transparent, turnkey appliances - the platform can be installed in under an hour without disruption to applications, clients, servers, or user workflow.

NetApp-Decru Solution
Simplicity = Security: Decru DataFort protects stored data from electronic and physical attacks using wirespeed AES-256 encryption, authentication, secure access controls, and crypto-signed logs. By locking down stored data with strong encryption and routing all access through secure hardware, the solution radically simplifies the security model for networked storage. DataFort is the only security appliance that can be transparently deployed in NAS, SAN, DAS, and tape environments.

EU Privacy Directive: European privacy laws govern the movement, usage, and deletion of personal data within and across EU countries. The NetApp-Decru solution provides an elegant mechanism for tightly controlling when and where customer data is visible.