Datrium Introduced Blanket Encryption for Private Clouds

Datrium, Inc. announced Blanket Encryption, a software product that combines always-on deduplication and compression technology with high-speed, end-to-end encryption: in use at the host, in flight across the network and at rest on persistent storage.

The number of breaches within the US have quadrupled from 2005 to 2015, and the year 2016 accounted for seven of the ten biggest data breaches. With threats rising, the requirement to encrypt data everywhere – from host-to-storage, between hosts, and between sites – is becoming standard. However, storage arrays and hyper-converged systems only protect data at rest and do not protect against host or network intrusions. Guest OSs and hypervisors offer encryption at the source, but at the expense of data reduction required by the economics of modern flash storage.

Security and economics without compromise
The company offers a new and comprehensive approach. By deduplicating and compressing data, then encrypting while it is still in the application host’s memory (RAM), Blanket Encryption can then move data across hosts, networks and storage that is always encrypted and efficient.

“At Security On-Demand, we have pioneered ground-breaking cloud-based services in security and threat management. Encrypting data in-flight and at-rest is critical, but without data reduction, it adds cost to the protection every business needs,” said Joel Holland, CTO, Security On-Demand. “The fact we can now get Blanket Encryption from Datrium that dedupes, compresses and encrypts data from application-to-disk is mind-blowing, and makes Open Convergence a no-brainer as a part of our secure cloud infrastructure.“

Simpler data security
Like the company’s DVX Open Convergence platform itself, Blanket Encryption was designed to make private clouds simple. It includes a built-in key management system so that more complex options are not required. With one step, all new data in the DVX data store will be protected.

Blanket Encryption is 100% software, leveraging a silicon-based instruction set in each server for speed, so it has virtually no impact on the DVX’s high performance. With more conventional SED-based approaches, adding encryption requires the purchase of new arrays or hyper-converged systems, adding expense and silos across the private cloud environment. Blanket Encryption is software-based, so encryption can be applied to any existing DVX well after initial purchase.

“Common wisdom was that encryption from host-to-storage lacked data reduction and suffered intolerable economic tradeoffs, forcing companies to settle for little more than ‘check-box data security’ with at-rest encryption from arrays or hyperconvergence,” said Arun Taneja, founder, president and consulting analyst, Taneja Group. “Datrium has shattered the myth, demonstrating that end-to-end encryption in concert with deduplication and compression is not only possible, but deliverable.“

“Datrium is putting the private back in private clouds,” said Brian Biles, CEO and founder, Datrium. “The point of private clouds is to be stone-cold simple and high trust. Blanket Encryption is a foundational requirement, and it’s currently only available on Datrium’s DVX.“

Blanket Encryption is available in April with list pricing at $10,000 per DVX.

Resources:
Blog: Five Big ways you might be compromising your data security efforts
Video: Big compromises in data security
Video: A new benchmark in data security
Webinar: Data security for private clouds