Risk
4/16/2009
03:45 PM
Connect Directly
RSS
E-Mail
50%
50%

Samsung Offers Self-Encrypting SSDs

Dell says it plans to offer the drives in laptops in the coming months.

Samsung Electronics on Thursday introduced what the company claims are the first hardware-based self-encrypting solid-state drives.

The 256-, 128-, and 64-GB SSDs provide full-disk encryption using Wave Systems' technology, which activates and manages the encryption. Computer maker Dell said it plans to offer the drives in laptops in the coming months.

Samsung claims the added security does not affect the performance of the SSDs, which will be available in 1.8- and 2.5-inch form factors. The company also claims to be the first to offer SSDs that incorporate hardware-based encryption.

Such encryption provides better security than the software alternative, because encryption keys and access credentials are generated and stored within the drive hardware, making it more difficult to hack, according to Samsung.

Wave's Embassy Trusted Drive Manager, which will come bundled with each Samsung SSD, will manage pre-boot authentication to the drive and enable administrators to set up users. The technology also enables backup of drive credentials.

In general, SSDs, which have no moving parts and use flash memory for storage, are more reliable and faster than hard disk drives. SSDs are also lighter, which is a plus for laptops.

However, the drives also have their problems. For example, review site PC Perspective found that Intel's X25-M SSDs degraded in performance with extensive use, a problem that has been said of other SSDs. Intel has said that the workloads used by the site did not reflect real-world use.

Along with degradation problems, SSDs also are considerably more expensive than HDDs. As a result, many experts advise using the drives only when their advantages are really needed.

Besides laptops, SSDs also are making their way in the data center as complements to hard disk arrays. Companies providing server-based SSDs include Fusion-io, Texas Memory Systems, and Super Talent.


InformationWeek Analytics has published an independent analysis of the challenges around enterprise storage. Download the report here (registration required).

Comment  | 
Print  | 
More Insights
Register for Dark Reading Newsletters
White Papers
Cartoon
Current Issue
Dark Reading, September 16, 2014
Malicious software is morphing to be more targeted, stealthy, and destructive. Are you prepared to stop it?
Flash Poll
Video
Slideshows
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2012-5700
Published: 2014-09-22
Multiple cross-site scripting (XSS) vulnerabilities in Baby Gekko before 1.2.2f allow remote attackers to inject arbitrary web script or HTML via the (1) id parameter to admin/index.php or the (2) username or (3) password parameter in blocks/loginbox/loginbox.template.php to index.php. NOTE: some o...

CVE-2014-0484
Published: 2014-09-22
The Debian acpi-support package before 0.140-5+deb7u3 allows local users to gain privileges via vectors related to the "user's environment."

CVE-2014-2942
Published: 2014-09-22
Cobham Aviator 700D and 700E satellite terminals use an improper algorithm for PIN codes, which makes it easier for attackers to obtain a privileged terminal session by calculating the superuser code, and then leveraging physical access or terminal access to enter this code.

CVE-2014-3595
Published: 2014-09-22
Cross-site scripting (XSS) vulnerability in spacewalk-java 1.2.39, 1.7.54, and 2.0.2 in Spacewalk and Red Hat Network (RHN) Satellite 5.4 through 5.6 allows remote attackers to inject arbitrary web script or HTML via a crafted request that is not properly handled when logging.

CVE-2014-3635
Published: 2014-09-22
Off-by-one error in D-Bus 1.3.0 through 1.6.x before 1.6.24 and 1.8.x before 1.8.8, when running on a 64-bit system and the max_message_unix_fds limit is set to an odd number, allows remote attackers to cause a denial of service (dbus-daemon crash) or possibly execute arbitrary code by sending one m...

Best of the Web
Dark Reading Radio