SYS-CON MEDIA Authors: Elizabeth White, Zakia Bouachraoui, Liz McMillan, Janakiram MSV, Carmen Gonzalez

Blog Feed Post

Porticor Helps Organizations Meet PCI DSS Compliance and Secure Credit Card Information Stored in the Cloud

Porticor’s Cloud Key Management and Data Encryption Solution Protects Cloud-based Cardholder and Financial Information from Holiday Hackers and Threats at Organizations such as Payze

CAMPBELL, Calif. – Dec. 2, 2014 – Porticor®, a leading cloud data security company delivering the only cloud-based key management and data encryption  solution that infuses trust into the cloud and keeps cloud data confidential, today announced growing customer traction due to its innovative solution enabling organizations to secure cloud-based credit card and financial information, helping them meet Payment Card Industry Data Security Standard (PCI DSS) compliance.  Customer privacy is of particular concern for financial organizations during the holiday season due to the increase in threats and hacker activity.

The Porticor Virtual Private Data (VPD) platform is a cloud key management and encryption solution that delivers the industry’s most secure cloud encryption key management by enabling organizations to securely maintain control of their own encryption keys.  Unlike traditional data encryption solutions, which are complicated and expensive to deploy and manage, Porticor’s split-key encryption and homomorphic key management system is offered as the industry’s first cloud data protection service of its kind, delivering true confidentiality of credit card and financial data in cloud, virtual and hybrid environments by ensuring encryption keys are never exposed.

“At Payze we’ve setup a credit card processing system within AWS, and as part of our PCI requirements we needed a separate key management system in order to comply with PCI policies,” said Joel Paulin, Founder and Chairman of Payze.  “We’ve integrated Porticor into our encryption key setup to provide seamless additional encryption on top of our existing encryption infrastructure.  This additional level of encryption, with keys isolated from our normal system, and using Porticor’s permissions and controls enables us to have a more secure key management posture going for PCI compliance.  What differentiates Porticor is the product: It is polished, easy to configure, easy to integrate, more reliable, and has greater security than the other options we had seen.”

The main focus of PCI DSS is protecting cardholder data in systems and applications, including data in storage, transmission, and in use.  These requirements are more critical when data is stored and processed in the cloud, an activity escalated during holiday shopping.  Porticor VPD is a complete solution that combines patented key management with state-of-the-art encryption to enable organizations to effectively comply with PCI DSS in the cloud.  Porticor encrypts the entire data layer, including virtual disks, databases, files, and object storage.  It also addresses the processes necessary for managing encryption environments and encryption keys, and provides the security needed for compliance in a convenient, cost-effective, fully cloud-based solution.

“We were impressed with the ease of setting up the Porticor appliance,” added Paulin.  “Compared to the other options we considered, we were more confident in the security of Porticor’s solution, and we appreciate the turnkey nature of it.  Also, because the Porticor systems provide automation of key management, we didn’t need to worry about a server crashing and losing our keys since the automated system would correctly provision our instances, which was a risk for other systems.  Finally, the use of a master key on the appliance kept by us helped give us assurance that Porticor did not know our keys and we had the benefit of dual control, which helped us meet our dual control needs for PCI compliance.”

The PCI Council defined 12 high-level security requirements.  Six of the requirements define the need for both encryption and key management in the cloud to protect credit card information from both inside and outside threats, and are addressed by Porticor.  Porticor gives organizations the ability to meet these requirements by requiring two keys to encrypt or decrypt an object.  In addition, each key is encrypted – to protect it while it is resident in a cloud account – using patent-pending homomorphic key management technology.  In addition, Porticor helps address some of the general PCI DSS requirements beyond encryption and key management.  For more information on how Porticor addressed PCI DSS compliance, see: http://www.porticor.com/pci-white-paper-download/

“Financial organizations are under threat at all times, but especially during this time of year with the increased consumer buying activity,” said Ariel Dan, Porticor Co-Founder and Executive VP.  “Porticor’s VPD is uniquely built to address PCI DSS compliance requirements, and the PCI DSS requirements validate the need for Porticor’s unique approach of combining patented split-key encryption and homomorphic key management with encryption technologies.  Key management is an ongoing challenge for organizations, and Porticor’s homomorphic key management solves this problem and enables companies to achieve compliance.  With Porticor, organizations are assured that credit card information and confidential data are kept safe from outside and internal threats.”

Integrating with major players such as HP, AWS and VMware, Porticor provides the industry’s only software-defined, automated solution that uniquely eliminates the need for cumbersome, non-scalable, and expensive hardware security modules for the cloud.  Uniquely combining data encryption with patented split-key encryption and homomorphic key management technologies, Porticor protects critical data in public, private and hybrid cloud environments.  It provides the strong security needed for compliance in a convenient, cost-effective, fully cloud-based solution.

About Porticor

Porticor is the leading cloud security company delivering easy-to-use and scalable security solutions for cloud data encryption and key management.  The Porticor Virtual Private Data (VPD) system is the industry’s first solution combining data encryption with patented split-key encryption and homomorphic key management to protect critical data in public, private and hybrid cloud environments.  Using breakthrough split-key encryption and homomorphic key management, the Porticor VPD is the only system available that offers the ease-of-use of cloud-based key management without sacrificing trust.  Porticor is an Amazon Web Services Technology Partner, a VMware Technology Alliance Partner, an HP technology partner, and supports other clouds.  The company is headquartered in Tel Aviv, Israel, with offices in Silicon Valley, and is venture backed.  For more information, visit: http://www.porticor.com/.

 

###

The post Porticor Helps Organizations Meet PCI DSS Compliance and Secure Credit Card Information Stored in the Cloud appeared first on Porticor Cloud Security.

Read the original blog entry...

More Stories By Gilad Parann-Nissany

Gilad Parann-Nissany, Founder and CEO at Porticor is a pioneer of Cloud Computing. He has built SaaS Clouds for medium and small enterprises at SAP (CTO Small Business); contributing to several SAP products and reaching more than 8 million users. Recently he has created a consumer Cloud at G.ho.st - a cloud operating system that delighted hundreds of thousands of users while providing browser-based and mobile access to data, people and a variety of cloud-based applications. He is now CEO of Porticor, a leader in Virtual Privacy and Cloud Security.

Latest Stories
Platform-as-a-Service (PaaS) is a technology designed to make DevOps easier and allow developers to focus on application development. The PaaS takes care of provisioning, scaling, HA, and other cloud management aspects. Apache Stratos is a PaaS codebase developed in Apache and designed to create a highly productive developer environment while also supporting powerful deployment options. Integration with the Docker platform, CoreOS Linux distribution, and Kubernetes container management system ...
Because Linkerd is a transparent proxy that runs alongside your application, there are no code changes required. It even comes with Prometheus to store the metrics for you and pre-built Grafana dashboards to show exactly what is important for your services - success rate, latency, and throughput. In this session, we'll explain what Linkerd provides for you, demo the installation of Linkerd on Kubernetes and debug a real world problem. We will also dig into what functionality you can build on ...
In a recent survey, Sumo Logic surveyed 1,500 customers who employ cloud services such as Amazon Web Services (AWS), Microsoft Azure, and Google Cloud Platform (GCP). According to the survey, a quarter of the respondents have already deployed Docker containers and nearly as many (23 percent) are employing the AWS Lambda serverless computing framework. It's clear: serverless is here to stay. The adoption does come with some needed changes, within both application development and operations. Th...
After years of investments and acquisitions, CloudBlue was created with the goal of building the world's only hyperscale digital platform with an increasingly infinite ecosystem and proven go-to-market services. The result? An unmatched platform that helps customers streamline cloud operations, save time and money, and revolutionize their businesses overnight. Today, the platform operates in more than 45 countries and powers more than 200 of the world's largest cloud marketplaces, managing mo...
The standardization of container runtimes and images has sparked the creation of an almost overwhelming number of new open source projects that build on and otherwise work with these specifications. Of course, there's Kubernetes, which orchestrates and manages collections of containers. It was one of the first and best-known examples of projects that make containers truly useful for production use. However, more recently, the container ecosystem has truly exploded. A service mesh like Istio a...
Containerized software is riding a wave of growth, according to latest RightScale survey. At Sematext we see this growth trend via our Docker monitoring adoption and via Sematext Docker Agent popularity on Docker Hub, where it crossed 1M+ pulls line. This rapid rise of containers now makes Docker the top DevOps tool among those included in RightScale survey. Overall Docker adoption surged to 35 percent, while Kubernetes adoption doubled, going from 7% in 2016 to 14% percent.
Technology has changed tremendously in the last 20 years. From onion architectures to APIs to microservices to cloud and containers, the technology artifacts shipped by teams has changed. And that's not all - roles have changed too. Functional silos have been replaced by cross-functional teams, the skill sets people need to have has been redefined and the tools and approaches for how software is developed and delivered has transformed. When we move from highly defined rigid roles and systems to ...
Even if your IT and support staff are well versed in agility and cloud technologies, it can be an uphill battle to establish a DevOps style culture - one where continuous improvement of both products and service delivery is expected and respected and all departments work together throughout a client or service engagement. As a service-oriented provider of cloud and data center technology, Green House Data sought to create more of a culture of innovation and continuous improvement, from our helpd...
Docker and Kubernetes are key elements of modern cloud native deployment automations. After building your microservices, common practice is to create docker images and create YAML files to automate the deployment with Docker and Kubernetes. Writing these YAMLs, Dockerfile descriptors are really painful and error prone.Ballerina is a new cloud-native programing language which understands the architecture around it - the compiler is environment aware of microservices directly deployable into infra...
The widespread success of cloud computing is driving the DevOps revolution in enterprise IT. Now as never before, development teams must communicate and collaborate in a dynamic, 24/7/365 environment. There is no time to wait for long development cycles that produce software that is obsolete at launch. DevOps may be disruptive, but it is essential. DevOpsSUMMIT at CloudEXPO expands the DevOps community, enable a wide sharing of knowledge, and educate delegates and technology providers alike.
Public clouds dominate IT conversations but the next phase of cloud evolutions are "multi" hybrid cloud environments. The winners in the cloud services industry will be those organizations that understand how to leverage these technologies as complete service solutions for specific customer verticals. In turn, both business and IT actors throughout the enterprise will need to increase their engagement with multi-cloud deployments today while planning a technology strategy that will constitute a ...
While more companies are now leveraging the cloud to increase their level of data protection and management, there are still many wondering “why?” The answer: the cloud actually brings substantial advancements to the data protection and management table that simply aren’t possible without it. The easiest advantage to envision? Unlimited scalability. If a data protection tool is properly designed, the capacity should automatically expand to meet any customer’s needs. The second advantage: the ...
At CloudEXPO Silicon Valley, June 24-26, 2019, Digital Transformation (DX) is a major focus with expanded DevOpsSUMMIT and FinTechEXPO programs within the DXWorldEXPO agenda. Successful transformation requires a laser focus on being data-driven and on using all the tools available that enable transformation if they plan to survive over the long term. A total of 88% of Fortune 500 companies from a generation ago are now out of business. Only 12% still survive. Similar percentages are found throug...
The platform combines the strengths of Singtel's extensive, intelligent network capabilities with Microsoft's cloud expertise to create a unique solution that sets new standards for IoT applications," said Mr Diomedes Kastanis, Head of IoT at Singtel. "Our solution provides speed, transparency and flexibility, paving the way for a more pervasive use of IoT to accelerate enterprises' digitalisation efforts. AI-powered intelligent connectivity over Microsoft Azure will be the fastest connected pat...
As you know, enterprise IT conversation over the past year have often centered upon the open-source Kubernetes container orchestration system. In fact, Kubernetes has emerged as the key technology -- and even primary platform -- of cloud migrations for a wide variety of organizations. Kubernetes is critical to forward-looking enterprises that continue to push their IT infrastructures toward maximum functionality, scalability, and flexibility. As they do so, IT professionals are also embr...