|By Gilad Parann-Nissany||
|June 13, 2014 08:33 PM EDT||
Amazon Web Services announced S3 SSE-C today; an enhancement allowing AWS S3 users to feed customer-generated keys to its S3 Server Side Encryption, which previously only allowed keys to be managed by Amazon itself. This is a great addition to the S3 feature set, and is a very usable way to enhance the security of AWS S3 for storing sensitive data.
Porticor’s Virtual Appliance for AWS integrates with AWS SSE-C to address two important questions:
- How can encryption keys be generated in a secure manner, especially given that virtual machines often suffer from lack of randomness (“entropy”).
- Best crypto practices call for a separate encryption key per S3 object – How can a customer manage a large set of sensitive encryption keys?
With Porticor, both issues are solved in a simple and elegant manner:
- The Porticor Virtual appliance serves as a secure source of crypto-grade random numbers, just the sort you need for cryptographic keys.
- The Porticor Key Management API allows your application to generate, store and retrieve cryptographic keys, and is easily accessible from any programming language as a simple RESTful API.
To illustrate the simplicity of the API, the following two operations generate a random key, and then (later on) delete the key. This happens after the application has been authenticated and received a temporary credential (a.k.a., authentication token):
PUT /api/protected_items/my-new-item?generate=16& api_cred=<temporary-cred>
The value returned in a JSON structure by the PUT operation can be used directly by the S3 calls. Keys (protected items) can have arbitrary names, and a natural solution would be to use the S3 object’s URI to name its corresponding cryptographic key.
As a further convenience feature, Porticor provides sample code in multiple programing languages, which lets you use the API without resorting to direct REST calls.
With major technology companies and startups seriously embracing Cloud strategies, now is the perfect time to attend @CloudExpo | @ThingsExpo, June 6-8, 2017, at the Javits Center in New York City, NY and October 31 - November 2, 2017, Santa Clara Convention Center, CA. Learn what is going on, contribute to the discussions, and ensure that your enterprise is on the right path to Digital Transformation.
Apr. 24, 2017 11:00 AM EDT Reads: 186
Developers want to create better apps faster. Static clouds are giving way to scalable systems, with dynamic resource allocation and application monitoring. You won't hear that chant from users on any picket line, but helping developers to create better apps faster is the mission of Lee Atchison, principal cloud architect and advocate at New Relic Inc., based in San Francisco. His singular job is to understand and drive the industry in the areas of cloud architecture, microservices, scalability ...
Apr. 24, 2017 11:00 AM EDT Reads: 3,244
SYS-CON Events announced today that T-Mobile will exhibit at SYS-CON's 20th International Cloud Expo®, which will take place on June 6-8, 2017, at the Javits Center in New York City, NY. As America's Un-carrier, T-Mobile US, Inc., is redefining the way consumers and businesses buy wireless services through leading product and service innovation. The Company's advanced nationwide 4G LTE network delivers outstanding wireless experiences to 67.4 million customers who are unwilling to compromise on ...
Apr. 24, 2017 10:30 AM EDT Reads: 255
Apr. 24, 2017 10:15 AM EDT Reads: 4,740
SYS-CON Events announced today that SoftLayer, an IBM Company, has been named “Gold Sponsor” of SYS-CON's 18th Cloud Expo, which will take place on June 7-9, 2016, at the Javits Center in New York, New York. SoftLayer, an IBM Company, provides cloud infrastructure as a service from a growing number of data centers and network points of presence around the world. SoftLayer’s customers range from Web startups to global enterprises.
Apr. 24, 2017 10:00 AM EDT Reads: 1,939
With major technology companies and startups seriously embracing IoT strategies, now is the perfect time to attend @ThingsExpo 2016 in New York. Learn what is going on, contribute to the discussions, and ensure that your enterprise is as "IoT-Ready" as it can be! Internet of @ThingsExpo, taking place June 6-8, 2017, at the Javits Center in New York City, New York, is co-located with 20th Cloud Expo and will feature technical sessions from a rock star conference faculty and the leading industry p...
Apr. 24, 2017 09:30 AM EDT Reads: 322
Apr. 24, 2017 09:00 AM EDT Reads: 306
The 20th International Cloud Expo has announced that its Call for Papers is open. Cloud Expo, to be held June 6-8, 2017, at the Javits Center in New York City, brings together Cloud Computing, Big Data, Internet of Things, DevOps, Containers, Microservices and WebRTC to one location. With cloud computing driving a higher percentage of enterprise IT budgets every year, it becomes increasingly important to plant your flag in this fast-expanding business opportunity. Submit your speaking proposal ...
Apr. 24, 2017 08:45 AM EDT Reads: 351
@GonzalezCarmen has been ranked the Number One Influencer and @ThingsExpo has been named the Number One Brand in the “M2M 2016: Top 100 Influencers and Brands” by Analytic. Onalytica analyzed tweets over the last 6 months mentioning the keywords M2M OR “Machine to Machine.” They then identified the top 100 most influential brands and individuals leading the discussion on Twitter.
Apr. 24, 2017 08:45 AM EDT Reads: 318
Apr. 24, 2017 08:45 AM EDT Reads: 277
Blockchain is a shared, secure record of exchange that establishes trust, accountability and transparency across supply chain networks. Supported by the Linux Foundation's open source, open-standards based Hyperledger Project, Blockchain has the potential to improve regulatory compliance, reduce cost and time for product recall as well as advance trade. Are you curious about Blockchain and how it can provide you with new opportunities for innovation and growth? In her session at 20th Cloud Exp...
Apr. 24, 2017 08:30 AM EDT Reads: 1,548
The buzz continues for cloud, data analytics and the Internet of Things (IoT) and their collective impact across all industries. But a new conversation is emerging - how do companies use industry disruption and technology enablers to lead in markets undergoing change, uncertainty and ambiguity? Organizations of all sizes need to evolve and transform, often under massive pressure, as industry lines blur and merge and traditional business models are assaulted and turned upside down. In this new da...
Apr. 24, 2017 08:00 AM EDT Reads: 5,042
The goal of Continuous Testing is to shift testing left to find defects earlier and release software faster. This can be achieved by integrating a set of open source functional and performance testing tools in the early stages of your software delivery lifecycle. There is one process that binds all application delivery stages together into one well-orchestrated machine: Continuous Testing. Continuous Testing is the conveyor belt between the Software Factory and production stages. Artifacts are ...
Apr. 24, 2017 08:00 AM EDT Reads: 884
Back in February of 2017, Andrew Clay Schafer of Pivotal tweeted the following: “seriously tho, the whole software industry is stuck on deployment when we desperately need architecture and telemetry.” Intrigue in a 140 characters. For me, I hear Andrew saying, “we’re jumping to step 5 before we’ve successfully completed steps 1-4.”
Apr. 24, 2017 07:30 AM EDT Reads: 1,451
Apr. 24, 2017 07:15 AM EDT Reads: 1,995