News
8/31/2009
10:55 AM
George Crump
George Crump
Commentary
50%
50%

The Foundation Of The Data Asset

In my last entry we discussed Making Data an Asset. This entry will focus on where that data asset should be stored. What is needed is a strong storage foundation, one that is designed to last for years, if not decades, but also one that will store that data efficiently and of course be complimentary to the enterprise class indexing that we described in our last entry.

In my last entry we discussed Making Data an Asset. This entry will focus on where that data asset should be stored. What is needed is a strong storage foundation, one that is designed to last for years, if not decades, but also one that will store that data efficiently and of course be complimentary to the enterprise class indexing that we described in our last entry.This foundation is similar to the one we described in our recent article "The Foundation of DeDupe's Next Era". The difference is that if we are looking at data as an asset as opposed to something we have to retain. To ascertain what data is worthy of being an asset we need to have our index and classifications performed across the data center by companies like Index Engines or Kazeon. Those solutions have to be enterprise in scale yet be simple to implement; a single or few appliances that can index the entire enterprise in a reasonable amount of time. Once the data has been mined, data that has value or is an asset should be stored in a vault-like storage location as soon as it becomes static.

These types of storage vaults are being provided today be companies like EMC, Nexsan, NEC and Permabit. Their goal is to be able to retain data for years, store that data efficiently and to be able to provide some sort of retention capabilities that will maintain a chain of custody on that data.

Also these types of solutions must be able to be searched quickly and they must be able to move that data back into production quickly. Although tape can now be indexed, disk archives may be a more ideal storage vault for asset data. Data that is an asset will have a high probability of needing to be found and restored quickly. While indexing tape is important, index today's data that is on disk so that you can understand what data is an asset and then being able to get that data back quickly can give a company a competitive advantage.

This storage vault needs to have some of the other attributes of any other disk archive. Beyond being able to find the asset, redundancy may be the most important part of this storage vault. The archive must be able to survive through multiple component failures and still be able to deliver the data back to you. Once you have classified something as an asset, storing it just in case you need it is no longer enough. You have verified that there is a high probability that you will need it, when you do you have to make sure that you can get it back.

Once the organization realizes that there is some "gold" in the data that they are keeping, the investment to find and then store that gold becomes obvious. It allows the IT team to more easily cost justify future purchases that will benefit not just the data assets but all the data in the enterprise.

Track us on Twitter: http://twitter.com/storageswiss

Subscribe to our RSS feed.

George Crump is founder of Storage Switzerland, an analyst firm focused on the virtualization and storage marketplaces. It provides strategic consulting and analysis to storage users, suppliers, and integrators. An industry veteran of more than 25 years, Crump has held engineering and sales positions at various IT industry manufacturers and integrators. Prior to Storage Switzerland, he was CTO at one of the nation's largest integrators.

Comment  | 
Print  | 
More Insights
Register for Dark Reading Newsletters
White Papers
Cartoon
Current Issue
Flash Poll
10 Recommendations for Outsourcing Security
10 Recommendations for Outsourcing Security
Enterprises today have a wide range of third-party options to help improve their defenses, including MSSPs, auditing and penetration testing, and DDoS protection. But are there situations in which a service provider might actually increase risk?
Video
Slideshows
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2015-5084
Published: 2015-08-02
The Siemens SIMATIC WinCC Sm@rtClient and Sm@rtClient Lite applications before 01.00.01.00 for Android do not properly store passwords, which allows physically approximate attackers to obtain sensitive information via unspecified vectors.

CVE-2015-5352
Published: 2015-08-02
The x11_open_helper function in channels.c in ssh in OpenSSH before 6.9, when ForwardX11Trusted mode is not used, lacks a check of the refusal deadline for X connections, which makes it easier for remote attackers to bypass intended access restrictions via a connection outside of the permitted time ...

CVE-2015-5537
Published: 2015-08-02
The SSL layer of the HTTPS service in Siemens RuggedCom ROS before 4.2.0 and ROX II does not properly implement CBC padding, which makes it easier for man-in-the-middle attackers to obtain cleartext data via a padding-oracle attack, a different vulnerability than CVE-2014-3566.

CVE-2015-5600
Published: 2015-08-02
The kbdint_next_device function in auth2-chall.c in sshd in OpenSSH through 6.9 does not properly restrict the processing of keyboard-interactive devices within a single connection, which makes it easier for remote attackers to conduct brute-force attacks or cause a denial of service (CPU consumptio...

CVE-2015-1009
Published: 2015-07-31
Schneider Electric InduSoft Web Studio before 7.1.3.5 Patch 5 and Wonderware InTouch Machine Edition through 7.1 SP3 Patch 4 use cleartext for project-window password storage, which allows local users to obtain sensitive information by reading a file.

Dark Reading Radio
Archived Dark Reading Radio
What’s the future of the venerable firewall? We’ve invited two security industry leaders to make their case: Join us and bring your questions and opinions!