Home > Data Backup News > Data encryption: Two users speak out
Data Backup News:
EMAIL THIS

Data encryption: Two users speak out

By Deni Connor
05 Dec 2008 | SearchDataBackup.com

Data backup technical tips
Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us    Add to Google

Data encryption is becoming a necessity in backup software. So many organizations have lost data either when tapes were lost during offsite transport or when a laptop was stolen, that it represents a major risk for many organizations.

Robert Stephenson, IT manager for Lewiston State Bank in Utah, was worried about the safety of his bank's data.

More on backup security
Tape encryption FAQ

Choosing a tape encryption product

How archiving and encryption impact backup

Ten ways you can make your data backups more secure
Like so many other IT administrators, Stephenson had suffered from data loss. Stephenson was backing up data for 20 servers to tape and transferring tapes offsite each day for disaster recovery -- he was concerned about it every step of the way.

"We were having problems with tape being couriered back and forth between our banking sites," says Stephenson. "We had no encryption, and one of the drivers actually lost a tape in his car one day. That almost caused us to shut the bank down in case the data got out."

Stephenson needed a secure method of backing up his data -- one that let him encrypt data while it was being backed up. It also needed to be in compliance with banking industry regulations..

He chose i365 (a Seagate company, formerly EVault), with its EVault Express Recovery Appliance, which vaults data from branch offices to an appliance in Lewiston and then to an EVault site in Scottsdate, Ariz. The EVault software encrypts data using FIPS-approved AES encryption.

University's HIPAA data a concern

Corey Grone, IT manager at the University of Pittsburg in Pennsylvania is another user for whom encryption played a major part in his selection of a backup vendor. Grone chose EMC Corp.'s MozyPro to back up 70 laptops and desktops.

"Encryption of data was a big concern for us," says Grone. "We investigated Mozy and did our due diligence there. Some of the features that met our requirements were the encryption of data in transit, and also the ability for us and our users to create their own encryption keys and guaranteeing the privacy of their information.

Grone took HIPAA privacy concerns into account in choosing Mozy. "Mozy had a public statement regarding HIPAA privacy that met our requirements," he says.

Mozy uses AES encryption as well as 448-bit Blowfish encryption. Encrypted files are transferred via a 128-bit SSL connection.

A variety of different products are available for encrypting data ranging from self-encrypting hard drives to encryption appliances to encryption options in traditional backup software.

Hitachi Global Storage Technologies announced an encrypting hard drive last month, which it calls Travelstar. The drive is a 5,400 rpm Serial ATA II drive that features Bulk Data Encryption -- data is encrypted with an encryption key. When the encryption key is deleted, data becomes unreadable and drive decommissioning is unnecessary. Seagate also complemented the Hitachi drives with some of its own; the company is shipping 7,200 rpm 320GB drives that use McAfee software for encryption.

In the appliance arena, NetApp continues to ship its DataFort appliances. These appliances, acquired from Decru, provide across-the-wire encryption of data for either tape- or disk-based backup. In addition, NetApp and Brocade have partnered to deliver Fibre Channel fabric-based encryption. In these implementations, NetApp's DataFort encryption and its key management services have been integrated into a Brocade switch and blade.

Finally, backup software such as CommVault's Simpana and EMC's Legato NetWorker have incorporated encryption options into their software. Virtually no backup software exists that doesn't have an encryption option -- CA's ARCserve Backup, IBM Corp.'s Tivoli Storage Manager and Symantec Corp.'s Veritas NetBackup all support encryption if users want it. Tivoli Storage Manager's encryption only enables encryption on IBM's TS1120 Tape Drives. CA's encryption is included in ARCserve as a standard feature.

NetBackup supports encryption at the client as part of the standard package. A Media Server Encryption Option (MSEO) is also available, which encrypts at the NetBackup media server layer. It includes a Key Management Server for centralized key management and is a chargeable option that consists of two components: a $10,000 option for the MSEO Key Management Server, and between $2,500 and $27,000 per master/media server depending upon operating system and server type. NetBackup also includes a key management service for LTO-4 and IBM TS1120 tape drives that is included at no charge.

About this author: Deni Connor is principal analyst with Storage Strategies NOW in Austin, TX.

Tags: Data backup securityData storage backup toolsTape backup and tape librariesVIEW ALL TAGS

Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us    Add to Google



RELATED CONTENT
Data backup security
Data backup and recovery news briefs: Thales Group releases CryptoStor Tape 3.0 appliance
Secure your data backups with encryption key management best practices
Podcast: Backing up data on mobile devices
Secure data destruction options for old backup tapes and disk
Putting a solid data backup and recovery plan behind mobile devices
Data storage backup security tutorial: Tape encryption and cloud backup
Quantum adds VMware data backup, encryption key management device
How do you make sure your data is secure when using a online/cloud backup provider?
Using an encryption appliance for data backup security
LTO-4 tape technology finally catching on -- tape storage isn't dead yet

Data storage backup tools
Data backup and recovery news briefs: Thales Group releases CryptoStor Tape 3.0 appliance
Data archiving reduces data backup workload prior to data deduplication
Symantec releases Linux version of Backup Exec System Recovery
Data backup and recovery news briefs: Druvaa Software updates flagship product, releases inSync v3.1
SQL Server data backup and recovery best practices
Data backup and recovery vendors dig into deduplication technology, aim for cloud backup
Veeam integrates with VMware vStorage APIs in Backup and Replication 4
Data backup and recovery news briefs: Data Domain upgrades data deduplication appliances
Double-Take replication software solves remote-office data backup headache for Lennox International
Using data deduplication with backup applications: Source vs. target dedupe

Tape backup and tape libraries
Secure your data backups with encryption key management best practices
Data backup news briefs: ProStor Systems ships InfiniVault removable disk backup appliance for SMBs
Upgrading from LTO-3 to LTO-4 tape for data backup and recovery
W. Curtis Preston: Articles and podcasts on data backup and recovery
The tape storage end game: The pros and cons of recycling backup tapes
Data backup and recovery news briefs: Tandberg Data introduces DAT tape drives and media
Community Health Centers Alliance takes control of data backup and recovery
Sun Microsystems wins best tape library in Storage Quality Awards survey
Fine-tuning tape storage systems for better data backup performance
Spectra Logic's BlueScale automates data replication across disk and tape with data deduplication

RELATED RESOURCES
2020software.com, trial software downloads for accounting software, ERP software, CRM software and business software systems
Search Bitpipe.com for the latest white papers and business webcasts
Whatis.com, the online computer dictionary



Data Backup Security: Tape Encryption & Backup Security
About Us  |  Contact Us  |  For Advertisers  |  For Business Partners  |  Site Index  |  RSS
SEARCH 
TechTarget provides technology professionals with the information they need to perform their jobs - from developing strategy, to making cost-effective purchase decisions and managing their organizations' technology projects - with its network of technology-specific websites, events and online magazines.

TechTarget Corporate Web Site  |  Media Kits  |  Site Map




All Rights Reserved, Copyright 2008 - 2009, TechTarget | Read our Privacy Policy
  TechTarget - The IT Media ROI Experts