Data security

Where Hitachi Storage Systems Solutions mean a Line of Defense

Hitachi offers security solutions and method in their Service Oriented Storage Solutions. As the storage can be an effective part of security strategy, HumanoIT provides Hitachi-related security services in order to reach the following goals:

• Enhanced authentication, authorization, and audit logging
• Continuous scans and analysis to identify operational risks

While the value of data lies in that in easily accessible and shared with many users, data owners rarely classify their data, so the existence and criticalness are not known many times. We must be so aware. In the past, data and storage related incidents were caused by insiders accidentally or on purpose to cause damage. Nowadays, the identity theft and corruption are everyday occurance, additionally, the industrial spies - as we know - use all known methods of technical information collection, so the outsiders are the problem.

The main challenge of storage security is to find the best balance between exposure and cost. In order to scale the security cost of storages Hitachi Data Systems determine some requirement helping to solve this task:

• Focus on the important data
• Identify the potential threats
• Map threats into attack points
• Analyze attack points for vulnerabilities and mitigating controls
• Secure baseline configurations

To fulfil the requirements, we offer the following fields of security:

Data security:

• Availability - support disaster recovery/business continuity replication by synchronous and asynchronous copies for both local and remote storage
• Integrity - Proving data integrity using checksums, timestamps and read-after-write Serial-ATA ( It means that controller keeps a copy of the original data in cache memory as it writes that data onto the disk. The controller then physically rereads that data into cache memory and uses Verify byte check logic borrowed from the SCSI command set to make sure the correct data has been recorded.)

Data protection:

• Availability - Making data non-erasable and non-rewritable for predetermined period
• Immutability - Fingerprinting objects in Hitachi Content Platform and Enterprise Storages active archive in order to provide long-term immutability
• Disposal - Data sanitization and controlled data destruction
• Confidentiality - data in-flight (when data is transmitted over a network) and at-rest (either the original production data or a copy) encryption, using external devices