technologyfiesta.blogg.se

Encryption is the primary method to safeguard sensitive information. It employs algorithms to encrypt data in order to allow it to be read only by someone who holds the key to decrypt it. The technology industry is continuing to advance encryption technology that safeguards data in rest -- information stored on a disk drive for instance -- as well as information in motion data that is transferred over a network. When you would like a useful source about confidential computing, sneak a peek at this website.

Data is being utilized. What can be done to secure data while it's stored in memory of a computer? This is the aim of Azure confidential computing, an industry initiative that aims to protect data while it's being examined in computer memory.

Building upon industry innovations

Confidential computing is enabled through hardware technology that reserves the CPU's memory as a secure enclave. It encrypts the memory within the enclave with the encryption key, which is unique to the CPU and the application.

This approach can be used by security agencies to safeguard sensitive information and application codes that are placed in the enclosure. That data can be decrypted only and on that CPU. This means that the data remains protected while it's in use -- for instance, when users conduct analyses on a database. Even if hackers gained root access to the system, they wouldn't be able to access the data.

This technology has an attestation function that allows an organization to confirm to other third parties that information is kept in an enclosure. A health care organization, for instance, can confirm that the data is in an enclav data, for instance can assure health care providers that data they provide will be secure.

The size of an enclave was restricted by the earlier versions of the technology. With the most modern generation of processors for computers, a server could have up to 1 TB of memory in the enclave. This permits agencies to put complete applications, databases or transaction servers within the enclave.

Protecting cloud data with confidence

This technology could change the security approach of agencies when using cloud computing. With traditional cloud computing, users are required to be able to trust the cloud service provider. While cloud providers may give every assurance that data will be protected when it is in storage, agencies may additionally take every precaution to ensure that their data is safe in motion. In the end, however agencies must hope their data will remain secure even when it is being used.

With AWS Nitro, agencies have the confidence that their data is secure. This is an important move, particularly for federal agencies which are heavily regulated. They can now protect their in-use data, even if it's hosted by a cloud service. The data will remain secure all through its lifetime, whether at rest, in motion and even when it is during use.

Government computing is now secure

To provide confidential cloud, top cloud providers have joined forces with top hardware manufacturers. Cloud services that are created using virtual machines will be accessible to agencies. This will enable them to choose cloud services that use the best hardware technology to safeguard their information. These VMs can be checked authentication tools.

Already in preview, confidential computing VMs for state, federal and local authorities and their partners in different cloud regions are now available. This technology lets agencies build enclave-based applications to protect the data stored in a private cloud that is compliant with government security and compliance requirements.

Of course, federal agencies usually manage cloud services in classified, air-gapped environments that are not connected to the internet. For those situations, hardware and cloud providers have partnered to develop tools that enable confidential-computing provisioning, updates and attestation without the need for an internet connection.