What are you looking for ?
Infinidat
Articles_top

CipherCloud Delivers AES 256-bit Encryption for Box

Customers retain encryption key.

CipherCloud, Inc. has delivered AES 256-bit encryption to its existing Box offering, an enterprise solution for cloud collaboration.

180,000 Box customers can refine their policy controls and extend protection to their sensitive information.

The company provides integrated AES 256-bit encryption, as an option to protect data, in Box. The encryption keys are retained by the customer – enabling them to have control over their data and assuring compliance of their sensitive information. While files are encrypted in Box, they can be accessed and decrypted by authorized users from anywhere, on any device.

While others vendors tout server-side or file sync-and-share (FSS) encryption for cloud storage and collaboration, both approaches contain pitfalls and risks including the cloud provider holding onto the keys, insider threats, and the complexity of administering. This offering enables tighter data privacy, security and compliance and ensures that the customer is in control of their information.

It is integrated to Box and transparent to users while preserving the benefits of Box and assuring that no third parties can gain unauthorized access to an organization’s information. The solution leverages Box APIs to scan content in real-time as it is uploaded and detects sensitive information based on the organization’s policies, including industry and country regulations – GLBA, PCI, HIPAA, the EU Data Protection Act, UK ICO guidance, the Australian Privacy Amendment Act and US State Privacy Laws.

Box is growing rapidly in popularity among organizations as they look to improve employee collaboration and productivity while lowering costs,” said Pravin Kothari, founder and CEO, CipherCloud. “But making this transition to the cloud also raises new and significant risks to the security, privacy and compliance of essential corporate information stored in the cloud.

Based on a customer’s policies, CipherCloud can enforce actions including alert, block, restrict sharing, quarantine, or automatically encrypting sensitive files. All actions and alerts occur through the Box interface along while preserving the ease-of-use that makes the service popular.

It also provides visibility for a customer into their Box usage with drill-down reporting and security dashboards that track user activity, file content, DLP violations and security anomalies.

CipherCloud for Box
It delivers protection to information in the cloud through a technology that enables organizations to adopt cloud applications. The technology protects information in real time, before it’s sent to the cloud, using operations-preserving technology.

Benefits
For customers, the solution contains information protection capabilities based on an open security platform.

  • 1. Encryption – Delivers AES 256-bit an open industry standard as defined by NIST under FIPS-197. This encryption based on policies is applied to any file uploaded into Box.
  • 2. Enterprise Key Management – Enables key management controls to ensure that the customers always retains control of their data, while supporting the NIST SP 800-57 standard.
  • 3. Cloud Data Loss Prevention – Supports out-of the box and custom DLP policies that scan, detect and take action to protect sensitive information in any field or document; integrates with existing DLP systems such as Symantec or RSA via the ICAP protocol.
  • 4. Cloud Malware Detection – Includes integrated malware protection preventing viruses from spreading via Box with zero-day protection against cloud viruses, spyware, Trojans, bots, rootkits and more.
  • 5. Real-Time and On-Demand Scanning – Delivers DLP scanning as the files are uploaded into Box with minimal latency. In addition, on-demand scanning is available for content already in Box folders, making it easy to add new users, or run audits on specific folders.
  • 6. Visibility and Security – Delivers visibility into all user interactions with Box through configurable reporting.
  • 7. User Experience and Support for BYOD – Transparent to users, supporting access from any location or device. The solution delivers protection through direct integration with Box APIs.
Articles_bottom
AIC
ATTO
OPEN-E