Features - Storage Innovations:

DECRU SHIPS DataFort T520 TO SECURE DATA FOR TAPE BACKUP

Decru Inc, a leader in networked storage security, announced that it has begun shipping Decru DataFort T520, an enterprise-class security appliance that provides encryption, authentication and logging capabilities for tape backup environments. With the DataFort T520, Decru adds new options to its tape security product line that already includes DataFort FC520, the first security appliance to support both Fibre Channel storage networks and tape backup. The addition of the DataFort T520 extends Decru's leadership as the only platform that can transparently secure storage across the entire enterprise -- including NAS, SAN, DAS and tape environments.

Data security is a top concern for IT organizations worldwide, and portable media like backup tapes pose unique security challenges. Tapes are small, easily concealed and frequently entrusted to third parties for offsite storage. When data is stored in cleartext, insiders, contractors or attackers can easily gain access to sensitive information. Decru's tape security appliances protect data with strong encryption, access controls and comprehensive auditing, ensuring that only authorized users can read sensitive data. DataFort's cryptographic host authentication prevents spoofing attacks, blocking unauthorized server access and enhancing fabric security.

Decru provides two options to secure sensitive data at rest in tape environments. Decru DataFort T520 leverages the secure hardware and comprehensive feature set of the DataFort platform, and is optimized for securing tape media. Decru DataFort FC520 supports encryption for both disk and tape within a single appliance. Both products support the following features:

• Strong 256-bit AES encryption provides maximum security for stored data. Decru's AES-256 encryption has been certified by the National Institute for Standards and Technology (NIST). Decru's full encryption implementation, including the Storage Encryption Processor, key management and clustering, has passed testing and is pending approval from NIST for FIPS 140-2, level 3 compliance.
• Lifetime Key Management System (LKM) securely automates key backup, recovery and archiving across the entire enterprise, drastically simplifying key management over time and across large organizations. LKM provides unified key management for NAS, SAN, DAS and tape environments, and incorporates a software-based recovery tool to ensure access to data in disaster recovery scenarios. The software recovery tool can be safely stored on tape, alongside the data, without compromising security. This ensures data availability in the event that DataFort hardware is rendered inoperable. LKM requires a quorum of Decru Recovery Smart Cards for all sensitive recovery functions, eliminating vulnerability to attacks by a single malicious insider.
• CryptoShred features enable users to simplify the process of permanently deleting data. By securely deleting an encryption key, all copies of associated data are instantly destroyed, regardless of physical location. CryptoShred provides vital functionality for a range of applications, including regulatory compliance and hardware redeployment or disposal.
• Interoperability -- Decru DataFort T520 and FC520 have full SCSI support. 2 Gbit Fibre Channel connectivity is available today, with LVD SCSI available in Q1 2004. DataFort has been extensively tested with a wide variety of operating systems, backup software, and storage devices to ensure interoperability.
• Compartmentalization -- Decru DataFort uses Cryptainer vaults to compartment stored data on shared media. For disk storage, a Cryptainer can be mapped to individual LUNs, and with tape storage, a different Cryptainer can be assigned per host, ensuring data privacy across applications or groups within a tape library.
• Upgradeable -- DataFort FC520 can be purchased with disk-only functionality, and upgraded to support tape. Likewise, DataFort T520 can be upgraded to an FC520 with both disk and tape support.

"Storage security has become one of the top concerns for enterprises, driven by regulatory and privacy requirements. In today's heterogeneous network environments, enterprises need to secure their data regardless of where it is stored," said W. Curtis Preston, president and CEO of The Storage Group. "Decru has demonstrated leadership as the only vendor to provide enterprise-wide storage security for all storage environments, including NAS, SAN, DAS and Tape."

"Our customers realize the value of securing their data assets, whether those assets are customer records, credit card information, health records, or source code," said Kevin Brown, vice president of marketing. "Enterprises are increasingly concerned about sensitive cleartext data leaving their facilities every day on tape, and DataFort provides them with a simple and obvious solution to this problem."

Providing security for data at rest in storage is a growing concern for IT organizations worldwide, due to increasing internal and external attacks. According to the FBI/Computer Security Institute, 50-80 percent of computer attacks originate behind the firewall, and 67 percent of companies reported internal breaches of their systems in the last 12 months. A broad range of federal and state regulations require corporations to protect the privacy and security of their data; penalties for non-compliance include significant fines, as well as civil and criminal prosecution.