HP Security Voltage provides data-centric security solutions to protect sensitive data in Hadoop environments. Their solutions leverage tokenization and encryption to safeguard data at rest, in motion, and in use across the data lifecycle. They presented use cases where their technology helped secure financial, healthcare, and telecommunications customer data in Hadoop and other platforms. Questions from analysts focused on implementation experience, performance impacts, integration with authentication, costs, and supported environments and partnerships.
3. Twitter Tag: #briefr The Briefing Room
Welcome
Host:
Eric Kavanagh
eric.kavanagh@bloorgroup.com
@eric_kavanagh
4. Twitter Tag: #briefr The Briefing Room
Reveal the essential characteristics of enterprise
software, good and bad
Provide a forum for detailed analysis of today s innovative
technologies
Give vendors a chance to explain their product to savvy
analysts
Allow audience members to pose serious questions... and
get answers!
Mission
5. Twitter Tag: #briefr The Briefing Room
Topics
September: HADOOP 2.0
October: DATA MANAGEMENT
November: ANALYTICS
7. Twitter Tag: #briefr The Briefing Room
Analyst: Robin Bloor
Robin Bloor is
Chief Analyst at
The Bloor Group
robin.bloor@bloorgroup.com
@robinbloor
8. Twitter Tag: #briefr The Briefing Room
HP Security Voltage
HP recently acquired Voltage Security (now HP Security
Voltage) to expand its data security solutions for big data
and the cloud
HP Security Voltage provides data and email protection
Its security product features data encryption, tokenization
and key management over structured and unstructured
data, including data in Hadoop
9. Twitter Tag: #briefr The Briefing Room
Guest: Sudeep Venkatesh
Sudeep Venkatesh is a noted expert in data
protection solutions, bringing over a decade of
industry and technology experience in this area to
HP Security Voltage. His expertise spans data
protection, security infrastructures, cloud
security, identity and access management,
encryption, and the PCI standards both for the
commercial and government sectors. He has
worked on numerous global security projects with
Fortune 500 firms in the United States and
globally. At HP Security Voltage, Sudeep serves in
the position of Vice President of Solution
Architecture, with responsibility over designing
solutions for some of HP Security Voltage's largest
customers in the end-to-end data protection
portfolio. This includes email, file and document
encryption, as well as the protection of sensitive
data in databases, applications and payments
systems.
11. Monetization
Data Sold on Black Market
Research Potential Targets
Research Infiltration
Phishing Attack and Malware
Discovery
Mapping Breached Environment
Capture
Obtain data
Attack Life Cycle
Exfiltration/Damage
Exfiltrate/Destroy Stolen Data
27. The Sorry Truth
Security was never engineered into
IT systems
It was always an afterthought
So it is with Hadoop
28. Windows of Opportunity…
u The “security surface”
that needs protection is
always growing
u Security solutions tend to
be fragmented
u The value targets are
health and credit card data
u Big data is just another
opportunity for the cyber
thief – only bigger
31. Hadoop Security
u Hadoop presents a wide
area of vulnerability
u Role-based access is
required (for self-service)
u Encryption is probably a
necessity
u Format-preserving
encryption is preferable
32. The Net Net
IT security is STRATEGIC
Encryption is a primary plank of this
33. u How “inconvenient” is HP Voltage Security?
Please describe an implementation.
What does the user experience?
u Security often comes with performance
penalties. What is the performance cost of HP
Security Voltage?
u Security needs to be integrated, so encryption
needs to shake hands with authentication.
How does this work with HP Voltage?
u Costs?
34. u Are there any environments to which HP Security
Voltage’s technology is inapplicable:
OLTP, Data Streaming & Streaming Analytics, BI,
Mobile, Cloud,…
u Which platforms/environments are supported?
u Which other security vendors/technologies does
HP partner with for data center solutions?