Cloud

12/4/2017
12:00 AM
Dark Reading
Dark Reading
Products and Releases
50%
50%

Gemalto Gives Google Cloud Platform Customers Flexible Encryption and Key Management Capabilities

Google customers can use Gemalto's SafeNet Data Encryption Solutions to bring their own encryption keys to secure their sensitive data on the cloud.

Amsterdam – Gemalto (Euronext NL0000400653 GTO), the world leader in digital security, today announced it is providing Google Cloud Platform customers with the ability to manage and maintain full control of their encryption keys on Google Cloud Platform. Gemalto’s SafeNet Luna Hardware Security Module (HSM) and SafeNet KeySecure now both fully support Google Cloud’s Customer-Supplied Encryption Key (CSEK) feature, meaning customers can generate, manage and bring their own encryption keys to protect data and workloads in Google Cloud Storage and Compute Engine.

A recent study by 451 Research found a third of organizations currently work with four or more cloud vendors. The ability to control all data encryption and key management operations across all cloud services providers helps companies ensure they have total control of their encrypted data, enabling them to protect their most sensitive information and meet compliance mandates.

“Many cloud service providers are offering variations of flexible key management such as bring-your-own-key (BYOK) and hold-your-own-key (HYOK). This is a big step in helping organizations leverage the growing number of cloud-based applications and services, while maintaining full control of their encryption keys across all of the cloud providers they use,” said Todd Moore, senior vice president of encryption products at Gemalto.

By integrating with Google’s CSEK functionality, companies including those in highly regulated industries can use an on premise SafeNet Luna HSM to generate, manage and retain complete control of keys to secure sensitive data on Google Cloud Platform. Companies also have the choice to decide what level of key ownership and control is desired when migrating operations, workloads and data to Google Cloud Platform. Gemalto’s SafeNet data encryption solutions make it easy to work across multiple clouds by centralizing encryption and key management allowing organizations to:

●      Gain visibility and control to consistently and effectively enforce security controls

●      Simplify monitoring and auditing of encryption and key management operations to demonstrate compliance with internal policies, industry standards like Payment Card Industry Data Security Standard (PCI-DSS) or HIPAA and government mandates like Europe’s General Data Protection Regulation (GDPR)

●      Reduce the burden on IT to manage multiple security services across each cloud platform

 

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
White House Cybersecurity Strategy at a Crossroads
Kelly Jackson Higgins, Executive Editor at Dark Reading,  7/17/2018
Lessons from My Strange Journey into InfoSec
Lysa Myers, Security Researcher, ESET,  7/12/2018
What's Cooking With Caleb Sima
Kelly Jackson Higgins, Executive Editor at Dark Reading,  7/12/2018
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Current Issue
Flash Poll
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2018-14339
PUBLISHED: 2018-07-19
In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the MMSE dissector could go into an infinite loop. This was addressed in epan/proto.c by adding offset and length validation.
CVE-2018-14340
PUBLISHED: 2018-07-19
In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, dissectors that support zlib decompression could crash. This was addressed in epan/tvbuff_zlib.c by rejecting negative lengths to avoid a buffer over-read.
CVE-2018-14341
PUBLISHED: 2018-07-19
In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the DICOM dissector could go into a large or infinite loop. This was addressed in epan/dissectors/packet-dcm.c by preventing an offset overflow.
CVE-2018-14342
PUBLISHED: 2018-07-19
In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the BGP protocol dissector could go into a large loop. This was addressed in epan/dissectors/packet-bgp.c by validating Path Attribute lengths.
CVE-2018-14343
PUBLISHED: 2018-07-19
In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the ASN.1 BER dissector could crash. This was addressed in epan/dissectors/packet-ber.c by ensuring that length values do not exceed the maximum signed integer.