IBM Cloud Delivers Quantum-Safe Cryptography and Hyper Protect Crypto Services to Help Protect Data in the Hybrid Era

IBM brings hybrid cloud leadership together with quantum and security research expertise to stay at the forefront of quantum cybersecurity

ARMONK, N.Y., Nov. 30, 2020 /PRNewswire/ — IBM (NYSE: IBM) today announced a series of cloud services and technologies designed to help clients maintain the highest available level of cryptographic key encryption protection to help protect existing data in the cloud1 and prepare for future threats that could evolve with advances in quantum computing. Pioneered by IBM Research scientists, the company is now offering quantum-safe cryptography support for key management and application transactions in IBM Cloud®, making it the industry’s most holistic quantum-safe cryptography approach to securing data available today.

IBM Corporation logo. (PRNewsfoto/IBM)

The new capabilities include:

  • Quantum Safe Cryptography Support: Through the use of open standards and open source technology, this service enhances the standards used to transmit data between enterprise and Cloud, helping to secure data by using a quantum-safe algorithm.
  • Extended IBM Cloud Hyper Protect Crypto Services: New capabilities are available to enhance privacy of data in cloud applications, where data sent over the network to cloud applications and sensitive data elements like credit card numbers, are stored in a database that can be encrypted at application-level – supported by the industry’s highest level of cryptographic key encryption protection with ‘Keep Your Own Key’ (KYOK) capability.

“As our reliance on data grows in the era of hybrid cloud and quantum computing capabilities advance, the need for data privacy is becoming even more critical. IBM now offers the most holistic quantum-safe approach to securing data available today and to help enterprises protect existing data and help protect against future threats,” said Hillery Hunter, Vice President and Chief Technology Officer, IBM Cloud. “Security and compliance remain front and center for IBM Cloud as we continue to invest in confidential computing and our leading encryption capabilities to help enterprises of all kinds – especially those in highly regulated industries – keep data secured.”

Preparing for future threats with Quantum-Safe Cryptography Support
While quantum computing aims to solve complex problems even the world’s most powerful supercomputers cannot solve, future fault-tolerant quantum computers could pose potential risks, such as the ability to quickly break encryption algorithms and access sensitive data. To mitigate these risks IBM has developed a clear strategic agenda to help protect the long term security of our platforms and services. This agenda includes the research, development and standardization of core quantum-safe cryptography algorithms as open source tools such as CRYSTALS and OpenQuantumSafe. It also includes the governance, tools and technology to support our clients as they start on the same journey to a more secure future.

Today, as the next step in that agenda, IBM is bringing its industry-leading encryption capabilities built by IBM Research cryptographers to help clients with a quantum-safe cryptography approach for their data-in-transit within IBM Cloud. The capabilities are designed to help enterprises prepare for future threats and can be useful against attacks in which malicious actors harvest encrypted data today with the intent to decrypt it later as quantum computing advances.

IBM Key Protect, a cloud-based service that provides lifecycle management for encryption keys that are used in IBM Cloud services or client-built applications, has now introduced the ability to use a quantum-safe cryptography enabled Transport Layer Security (TLS) connection – helping to protect data during the key lifecycle management.   

In addition, IBM Cloud is also introducing quantum-safe cryptography support capabilities to enable application transactions. When cloud native containerized applications run on Red Hat® OpenShift® on IBM Cloud or IBM Cloud Kubernetes Services, secured TLS connections can help application transactions with quantum-safe cryptography support during data-in-transit and protect from potential breaches.

Protecting sensitive data with IBM Cloud Hyper Protect Crypto Services
Enterprises also need to mitigate risks from external and internal threats, as well as to address regulatory compliance.

Today, IBM Cloud is also delivering new capabilities to help secure application transactions and sensitive data using IBM Cloud Hyper Protect Crypto Services, which offer the industry’s highest level of cryptographic key encryption protection by providing customers with ‘Keep Your Own Key’ (KYOK) capability. Built on FIPS-140-2 Level 4-certified hardware – the highest level of security offered by any cloud provider in the industry for cryptographic modules2 – this allows clients to have exclusive key control, and therefore authority over the data and workloads protected by the keys.

Designed for application transactions where there is a deeper need for more advanced cryptography, IBM Cloud clients can keep their private keys secured within the cloud hardware security module while offloading TLS to IBM Cloud Hyper Protect Crypto Services to help establish a secure connection to the web server. They can also achieve application-level encryption of sensitive data, such as a credit card number, before it gets stored in a database system.

Continuing to address the security demands of clients and highly regulated industries
IBM has been investing in confidential computing technologies for over a decade and today delivers production-ready confidential computing to help clients protect data, applications and processes.

Furthering its commitment to security and compliance, IBM continues to collaborate with its industry peers to make further progress in standardization initiatives. For example, security best practices on IBM Cloud are now available as a Center for Internet Security (CIS) Foundations benchmark for IBM Cloud, and IBM Research cryptographers are key contributors to the QSC algorithms that are short listed in the National Institute of Standards and Technology (NIST).

IBM, the IBM logo, and IBM Cloud are trademarks or registered trademarks of IBM Corp., in the U.S. and/or other countries.

Red Hat® and OpenShift® are trademarks or registered trademarks of Red Hat, Inc. or its subsidiaries in the United States and other countries.

About IBM Cloud
For further information visit: www.ibm.com/cloud/

CONTACT:
Kate Gazzillo
IBM Communications
kate.gazzillo@ibm.com 

Encryption keys and cryptographic operations are protected with highest level certified HSM –  with Hyper Protect Crypto services: FIPS 140-2 Level 4.

2 Based on IBM Hyper Protect Crypto Service, the only service in the industry built on FIPS 140-2 Level 4-certified hardware. FIPS 140-2 Security Level 4 provides the highest level of security defined in this standard. At this security level, the physical security mechanisms provide a comprehensive envelope of protection around the cryptographic module with the intent of detecting and responding to all unauthorized attempts at physical access.

SOURCE IBM

This post was originally published on this site



For enquiries, product placements, sponsorships, and collaborations, connect with us at hello@globalcloudplatforms.com. We'd love to hear from you!


Our humans need coffee too! Your support is highly appreciated, thank you!

Total
0
Shares
Previous Article

Built With The Google Maps Platform Gaming Solution

Next Article

Tune up app performance and cost efficiency

Related Posts

Bloomberg Media and Intelligence Squared U.S. present a new limited debate series “That’s Debatable” hosted by Award-Winning Journalist and Moderator John Donvan and featuring AI from IBM Watson

The one-hour program will premiere on Bloomberg Television on Friday, October 9 at 7:00 PM Audiences can join the conversation now by submitting their arguments at IBM.com/debatable on the first debate topic: “It’s Time to Redistribute the Wealth” NEW YORK September 3, 2020 -- Bloomberg Media today announced a new interactive debate series titled “That’s Debatable,” to debut on Bloomberg Television Friday, October 9 at 7:00PM ET. Presented in partnership with Intelligence Squared U.S. and hosted by four-time Emmy Award-winning journalist, broadcaster and Intelligence Squared’s longtime debate moderator John Donvan, the program will feature industry leaders, economists, policy makers and public intellectuals debating some of today’s most pressing issues. “That’s Debatable” is sponsored exclusively by IBM. Filmed in front of a live virtual audience, “That’s Debatable” will be conducted in the traditional Oxford-style format with two teams of two subject matter experts debating over four rounds. The live audience will select a winner via mobile, to be announced at the conclusion of the program. The show will also demonstrate how AI can be used to bring a larger, more diverse range of voices and opinions to the public square and can help uncover new perspectives to enhance the debaters’ arguments. The general public is invited to submit a short argument for or against each episode’s position statement. During the debate, IBM Watson plans to use Key Point Analysis, a new capability in Natural Language Processing (NLP) developed by the same IBM Research team that created Project Debater, which is designed to analyze viewer submitted arguments and provide insight into the global public opinion on each episode’s debate topic. “Bloomberg Media’s global audience regularly turns to Bloomberg Television as a critical source of news and information,” said Al Mayers, Global Head of Bloomberg Television and Radio. “By partnering with Intelligence Squared for ‘That’s Debatable,’ we will provide viewers with thoughtful discourse and insights into some of the most important subjects currently at the forefront of national and global conversation.” “Globally, we are facing unprecedented and complex challenges,” said Intelligence Squared U.S. CEO Clea Conner. “In this era of seemingly endless soundbites and social media echo chambers, it is harder than ever before to truly engage with the other side of an issue. At this historic moment, we are calling for a return to civilized and substantive debate to help us navigate a rapidly changing world. Together with Bloomberg TV, and our exclusive sponsor IBM, ‘That’s Debatable’ will explore multiple viewpoints of the most important topics of our time -- and give a voice to a global audience with Watson’s advanced AI analysis.” The debut episode’s debate topic is: “It’s Time to Redistribute the Wealth.” As nations around the world face a reckoning on race and social justice and work to combat the economic impacts of the pandemic, “That’s Debatable” will take a hard look at the hotly contested question with leading experts on both sides of the argument. Audiences can join in the discussion by submitting a short argument for or against the motion: "It's time to redistribute the wealth" starting today through September 14 at www.ibm.com/debatable. Then tune into “That's Debatable” on October 9 to see a debate fueled in part by your submission. "Our ambition for ‘That’s Debatable’ is simple -- to showcase one of the many ways AI can be used for good by helping people understand nuanced viewpoints, discover and surface critical insights, and inform high stakes decision making,” said Daniel Hernandez, General Manager, IBM Data and AI. “What we learned from over 30,000 Watson client engagements inspired IBM Research to create cutting-edge innovation in language, automation and building trust, which will be demonstrated in the series and made available in Watson for all businesses to use.” About Bloomberg Media: Bloomberg Media is a leading, global, multi-platform brand that provides decision-makers with timely news, analysis and intelligence on business, finance, technology, climate change, politics and more. Powered by a newsroom of over 2,700 journalists and analysts, it reaches influential audiences worldwide across every platform including digital, social, TV, radio, print and live events. Bloomberg Media is a division of Bloomberg LP. Visit BloombergMedia.com for more information. About Intelligence Squared U.S.: A non-partisan, non-profit organization, Intelligence Squared U.S. was founded to address a fundamental problem in America: the extreme polarization of our nation and our politics. Their mission is to restore critical thinking, facts, reason, and civility to American public discourse. The award-winning debate series reaches millions of viewers and listeners through multi-platform distribution, including public radio, podcasts, live streaming, newsletters, interactive digital content, and on-demand apps including Roku and Apple TV. With over 180 debates and counting, Intelligence Squared U.S. has encouraged the public to "think twice" on a wide range of provocative topics. Author and ABC News correspondent John Donvan has moderated IQ2US since 2008. About IBM Watson: Watson is IBM’s AI technology for business, helping organizations to better predict and shape future outcomes, automate complex processes, and optimize employees’ time. Watson has evolved from an IBM Research project, to experimentation, to a scaled set of products that run anywhere. With more than 30,000 customers, Watson is being applied by leading global brands across a variety of industries to transform how people work. To learn more, visit: https://www.ibm.com/watson. To learn more about Natural Language Processing and how new capabilities like Key Point Analysis are designed to analyze and generate insights from thousands of arguments on any topic, visit: https://www.ibm.com/watson/natural-language-processing. Contact: Sarah MurphyIBM Media Relationssrmurphy@us.ibm.com336-337-7584

IBM Advances Cloud Pak for Security to Manage Threats Across Tools, Teams & Clouds

- Open platform leverages AI and automation to streamline threat management across hybrid cloud environments and disparate security tools- Industry-first ability to connect threat management, data security and identity within a single platform- New turnkey security services to address cybersecurity skills shortage and remote workforce ARMONK, N.Y., Oct. 14, 2020 /PRNewswire/ -- IBM (NYSE: IBM) Security today announced new and upcoming capabilities for Cloud Pak for Security, including a first of its kind data security solution that allows companies to detect, respond to and protect against threats to their most sensitive data across hybrid cloud environments. Designed to unify previously disconnected security technologies, IBM has expanded Cloud Pak for Security to include new data sources, integrations, and services that allow security operations teams to manage the full threat lifecycle from a single console. With these upcoming capabilities,1 Cloud Pak for Security will include access to six threat intelligence feeds, 25 pre-built connections to IBM and third-party data sources, and 165 case management integrations – which are connected through advanced AI to prioritize threats, and automation playbooks to streamline response actions for security teams. As cloud adoption and remote work have dispersed the traditional IT perimeter, security response teams can benefit from deeper insights into security across hybrid cloud environments. User behavior, identities and data security have traditionally been siloed from threat management. With the upcoming new capabilities, Cloud Pak for Security will become the first platform in the industry to connect data-level insights and user behavior analytics with threat detection, investigation and response. Today IBM is announcing capabilities to advance the Cloud Pak for Security even further, including: Coordinated Threat Response + Data Security: IBM has developed a new industry-first approach to provide security teams with visibility into data activity, compliance and risk, without needing to leave their primary response platform. The new built-in data security hub, scheduled for general availability in Q4, allows analysts to quickly gain context into where their sensitive data resides across hybrid cloud environments, as well as who has access to it, how it is used, and the best way to protect it. Bridging the disconnect between data security and threat management can reduce the timeline for responding to data breaches, which currently take more than six months to identify and contain on average for recently surveyed organizations.2 Access to Industry Leading Threat Intelligence: Cloud Pak for Security is expanding its collection of threat intelligence, helping clients detect early warning signs of active threat campaigns impacting companies around the world. In addition to IBM's X-Force Threat Intelligence Feed, the platform will provide pre-built integrations for five additional threat intelligence feeds from third-party sources, including AlienVault OTX, Cisco Threatgrid, MaxMind Geolocation, SANS Internet StormCenter and Virustotal scheduled for general availability in Q4, and additional threat feeds expected to be added in 2021. Dedicated Services and Support: IBM is launching new dedicated security services to help organizations modernize their security operations with Cloud Pak for Security, leveraging a holistic approach connecting products and services. With a wide range of flexible service options, IBM experts can help clients deploy and manage Cloud Pak for Security across any environment, including end-to-end threat management, managed security services, as well as strategy, consulting and integration support. "Complexity is the greatest challenge facing our industry, forcing resource-strapped security teams to manually connect the dots between disparate tools and sources of security data," said Justin Youngblood, Vice President, IBM Security. "Cloud Pak for Security is built on open, cloud native technologies from the ground up to connect any tool within the security ecosystem. With these updates, we will be the first in the industry to bring together external threat intelligence and threat management alongside data security and identity, helping organizations to modernize their security operations and create the foundation for a zero trust security strategy." Open Connections Across the Security EcosystemCloud Pak for Security leverages open technologies to create an interoperable foundation and deeper connections between the IBM and third-party tools. For instance, the platform uses STIX-Shifter, an open-source library that allows security analysts to search for threat indicators across all connected data sources with a single query. Additionally, Cloud Pak for Security is built on Red Hat OpenShift, providing an open, containerized foundation that can be easily deployed across on-premise, public and private cloud environments.   This open approach allows Cloud Pak for Security to be more than simply a collection of security capabilities, but rather a platform to fully integrate security processes across tools and clouds. The platform uses advanced AI, analytics and automation to streamline the full lifecycle of threat management – including native capabilities for Security Information and Event Monitoring (SIEM), Threat Intelligence, User Behavior Analytics, Data Security and Security Orchestration Automation and Response. These capabilities are delivered through a single, unified user interface that connects the entire threat management process via end-to-end workflows, from detection through response. Through IBM Security's participation in the Open Cybersecurity Alliance, the company will continue to work with the community to advance the development and adoption of open technologies to make security more interoperable. Unified Product and Services ApproachCloud Pak for Security's open framework makes it an ideal solution for collaboration between security teams and external service providers that augment companies' security skills and expertise. Cloud Pak for Security also supports multi-tenancy, enabling service providers to leverage a single instance of the platform to serve multiple companies and sub-organizations while keeping their data isolated. The extensive capabilities of Cloud Pak for Security can be supported by and integrated with IBM Security Services, with unified offerings that connect technologies and services. Clients can take advantage of X-Force Threat Management, an ongoing, end-to-end threat management service that uses a programmatic approach to help clients mature their overall threat management strategy over time. Companies can also leverage a wide variety of IBM Managed Security Services, using Cloud Pak for Security to facilitate real time collaboration and visibility between clients and service teams. Alternatively, companies can leverage IBM Security expert consultants to help them plan for, deploy and integrate the Cloud Pak for Security with their existing security investments. To learn more about IBM Cloud Pak for Security and stay up to date regarding its latest capabilities, visit the website here. You can also register for the webinar which will take place October 29, 2020 at 11:00 a.m. EDT.  About IBM SecurityIBM Security offers one of the most advanced and integrated portfolios of enterprise security products and services. The portfolio, supported by world-renowned IBM X-Force® research, enables organizations to effectively manage risk and defend against emerging threats. IBM operates one of the world's broadest security research, development and delivery organizations, monitors 70 billion security events per day in more than 130 countries, and has been granted more than 10,000 security patents worldwide. For more information, please check www.ibm.com/security, follow @IBMSecurity on Twitter or visit the IBM Security Intelligence blog. Disclaimer: Statements regarding IBM's future direction and intent are subject to change or withdrawal without notice, and represent goals and objectives only. Media Contact: Cassy LalanIBM Security PRm: 319-230-2232cllalan@us.ibm.com 1 Scheduled for general availability within Q4 2020  2 2020 Cost of a Data Breach Report, conducted by The Ponemon Institute and sponsored by IBM Security SOURCE IBM