Quantum Corp., a storage solutions provider has unveiled a cost free, comprehensive, multi-layered data security framework focused specifically on backup, recovery and archive processes.
While dealing with security for standalone tape drives, tape cartridges, tape automation and disk-based backup systems, this framework also encompasses three types of controls - governing physical access, administrative access and data access. These controls would be incorporated into a range of security offerings to be introduced in phases.
The initial security offering, DLTSage is a solution designed to prevent unauthorized access to data on tape cartridges and to protect tapes that must have been transported offsite. It is a firmware feature designed into its newest DLT tape drives that uses an electronic key to prevent or allow reading and writing of data on to a tape cartridge.
This key can be managed in three ways:
* At the individual tape drive level, using DLTSage management architecture
* By host backup application and
* By the management console from which Quantum's tape autoloaders and libraries are managed
A study by Enterprise Strategy Group found that less than 20% of companies regularly encrypt their data. The reluctance to take action in the area of storage security are due to cost, performance degradation, and the impact on recovering data, as well as the sense that many solutions don't meet the full range of security needs.
This new security framework takes a defense-in-depth approach with controls on physical access, administrative access and data access in backup, recovery and archive processes.
Quantum, which currently provides physical locks on its storage systems is also planning to offer administrative controls such as user authentication and authorization and role-based access privileges that allow only authorized administrators to access the system.
Audit logging and Secure Socket Layer/Secure Shell (SSL/SSH) support are the other administrative controls provided by Quantum.
