CHOOSE YOUR LANGUAGE
English Selected
ALL COUNTRIES ARE WELLCOME HERE!
CHOOSE YOUR LANGUAGE
English Selected
ALL COUNTRIES ARE WELLCOME HERE!
I am making all of our online servers much more secure against hackers and file or email interception.
In addition to the creation of a private server, within my office to have access to the Deep Web, TOR The onion Router, used mainly by the dark world of the Internet, not detectable by those who surf the Internet or send email.
It is still under construction.
But my next investment is in protecting our visitors as much as possible on the current pages that we use publicly today.
Here I present the degree of security that we will have.
Hector Gonzalo
Our technology
Tribal knowledge about encryption is outdated. A lot has changed with technology and Data encryption is no longer just a tick-box activity.
See what it can do
While there are endless File and Folder Encryption (FFE) products on the market, not all are created equal. Many File Level Encryption (FLE) solutions establish security silos for “sensitive” Data or Data users deem the most important, and even that not in all three states (in-transit, in-use, and at-rest). The problem is, in today’s highly connected and work everywhere world, isn’t all Data important?
With our unique approach to Data encryption, you no longer have to decide what Data to protect. Our SecureData technology protects everything, in every place, all the time. It does this by making encryption an inherent property of your Data, as opposed to a collection of reactive systems, restrictive tools that impact usability, and incomplete policies that can never keep up.
When comparing encryption solutions, we recommend asking these three questions before making a decision:
Does the encryption software offer proactive protection?
If there’s anything that 2020 has taught it’s that all the bells, whistles, and consulting in the world can’t predict the future. To stay ahead of every threat, every time, proactiveness is key. The problem is, many encryption solutions require active user involvement. If the approach isn’t completely proactive and it places a burden on the user, it’s only natural that these users will find their own (unsecured) methods to get on with their day-to-day work.
Our encryption technology removes the human element, making protection an inherent and invisible part of the Data.
Is the encryption software really designed to provide 100% protection?
Full Disk Encryption (FDE or sometimes volume encryption) that protects “mission-critical” or “sensitive” files sounds powerful but the reality is, it only protects Data on a dormant system (please see the FAQs below on the distinction between FDE and File Level Encryption or FLE). To us, security is either 100% or 0% and our FLE is really 100% for every file, every place, and every time.
Our encryption software can be configured to provide this 100% protection. We protect every file (including those on legacy and in-house custom applications), every place (from endpoints to the cloud and back), and every time (in-transit, in-use, and at-rest).
Is the encryption software authenticating the user and securing Data at the endpoints?
It’s important to ensure that the Data protection is provided at the point where it’s being processed so that there are no security gaps, and that no Data in any state (in-transit, in-use, and at-rest) is left vulnerable. When encryption is processed at a server instead of at the endpoint, it leaves gaps that can result in Data being unavailable for legitimate users, available to unauthorized users, or even sent across networks unprotected. User and context based rules and boundaries are never perfect and endpoint authentication is the only way to protect every file, every place, and every time.
Our encryption software authenticates each file for each user and encrypts at the file level at the endpoint.
Once you clear the three questions above, the devil is in the details of how the encryption keys are paired and managed. Public Key Infrastructure (PKI) provides a trusted certificate authority for asymmetric encryption, linking unique keys for each user and each of their files. SecureAge PKI-based (i.e. asymmetric) File Level Encryption guarantees three distinct advantages:
Protection for every file, every place, and every time
PKI-based Data encryption uses unique encryption keys for each file, while at the same time, building authentication into Data. That means, every time that the Data is accessed the identity of the request is checked, and every file is always protected, in every location - no matter where it is copied.
This differs from other encryption solutions that rely only on symmetric encryption as they have no way of authenticating each user against each file. With access to this single symmetric encryption key, any user can access any Data for any purpose.
Natural and secure file sharing
PKI technology supports many commonly used applications including file-level encryption, digital signatures, and email. It can be designed in a way that the encryption is an inherent part of the Data and therefore invisible to the user. This means users are not required to take any additional steps to ensure protection.
Other encryption solutions rely only on symmetric encryption which uses proprietary mechanisms to store and share keys. By using one key it not only reduces security but also adds an administrative burden to perform "key rotation".
Far-reaching implications
With PKI-based Data protection, it’s possible to conquer both external and insider cybersecurity threats and even protect users that make honest mistakes. User-specific key ensures that even if installed, unauthorized processes like malware can’t spread to new users who have different unique keys.
The reality is, other encryption solutions allow for security gaps that give cybercriminals an opportunity to operate. The SecureAge approach to PKI-based encryption forms a complete security solution without gaps.
Secure and compliant, find out more
What is the difference between Full Disk Encryption (FDE) and File Level Encryption (FLE)?
As its core function, Full Disk Encryption (FDE) protects everything that is on a computer’s hard drive, including the OS, user files, and any type of Data therein without the user having to think about what to encrypt. That protection, however, exists only when the machine is turned off and the FDE encryption key is not present
When the computer is turned on and the encryption key has been engaged, every file can be decrypted when accessed and potentially breached. Data in-use and in-transit are plain, whether intended by the user or stolen through some remote attack.
File Level Encryption (FLE) similarly encrypts every user file without any action or decision making. But that encryption remains, whether the computer is on or off, whether the file is open or closed, and whether those files are moving or are at rest. Every benefit of FDE for Data files remains with the SecureAge approach to FLE, but the encryption persists and doesn’t work just some of the time.
The “full” in FDE does not mean comprehensive – it means at the highest level, some of the time. Data Security should be at the lowest level, all of the time.
What is the performance impact of SecureAge PKI-based File Level Encryption?
Our PKI-based encryption is faster than the graphical user interface which makes it so fast that your employees will never notice. We "stream" Data from the disk, through our encryption engine, and into memory so the application does not need to wait for the whole file to be decrypted before use. In fact, the file remains encrypted on disk all of the time.
Modern processors will provide an instruction set specifically for encryption so these security activities do not rob any time from your normal processing cycles. Our government clients who run large databases and typically experience performance hits (due to the combination of CPU, RAM, hard drive performance, and network connection), have been able to minimize performance impact with our solutions.
What encryption algorithms are available with SecureAge technology?
Symmetric algorithms include the popular AES (Advanced Encryption Standard) known for its speed and flexibility; everyday Wi-Fi, VPNs, and SSL for example rely on AES. The SecureAge PKI-based approach is different in that it relies on asymmetric algorithms such as RSA without a detectable impact on performance. In addition to RSA, our technology also includes the latest advancements in asymmetric ECC (Elliptic Curve Cryptography).
Our unique approach also allows us to plug in any encryption algorithm that our customers prefer. Many of our government and research clients prefer their own bespoke algorithms and we’re able to extend that level of comfort and compliance to everyone, everywhere.
How does SecureAge technology make key management easy?
SecureAge uses a unique Data encryption key for each file so the number of times a Data encryption key is used has limited scope. Access to decrypted Data is managed through authenticated access to PKI-based credentials. Renewal of digital certificates is fully automated, as is the use of the correct certificate for each Data access request.
How does SecureAge technology work with SIEM systems?
SecureAge's comprehensive and detailed logging system can easily be integrated with any SIEM system. SecureAge delivers logs and alerts that can be consumed by the SIEM system so that administrators are alerted to important events while providing full background information for forensic analysis.
How can SecureAge technology secure cloud-based Data storage?
The SecureAge approach of encrypting Data at the endpoint means that Data is protected from its first creation right through its lifespan, while your organization alone controls the securing encryption keys. Where organizations use cloud-based services and applications, it is common for users to download information from those systems, for example, reports, statistics, and material for documents. Recognizing that this “ad-hoc” Data is likely to be scattered throughout the network, SecureAge technology ensures that this potentially sensitive information is protected.
What are the limitations of Full Disk Encryption (FDE)?
FDE is essentially hardware security. Everything on the hard drive of a computer running FDE – from the OS to applications to files to metadata – will be encrypted when that hardware shuts down. FDE ensures that nothing on that machine can be stolen without the encryption key.
But when that machine is turned on, the encryption key is entered, and the hard disk is spinning so that the Data on it can be used, FDE no longer protects any of it. All of the files can be removed as plain, unencrypted Data.
FDE is great if someone steals your laptop from your bag. But it's not so great for the way real people use and lose Data every day. We need to turn our machines on to access our Data, and that’s precisely when FDE can’t help.
What are the limitations with Transparent Data Encryption (TDE)?
TDE does not protect unstructured files outside the vendor’s database. Today, most applications make use of unstructured Data but TDE does not encrypt such data, leaving it vulnerable to misuse and theft.
TDE does not protect the vendor’s temporary and log files. TDE considers temporary, log, and report files unimportant and as a result, they are unsecured. These files can, however, can contain sensitive or proprietary information.
TDE is database-specific, meaning you'll need separate TDE licenses for each database software, and each license will need to be managed separately - costly and time-consuming.
What are the limitations of Homomorphic Encryption?
Homomorphic encryption is too slow to be practical, with performance hits around 50,000 times that of working with plain Data. This is compared to the tried and true invisible impact of SecureAge PKI-based File Level Encryption.
Homomorphic encryption requires application modifications. Businesses will need to rewrite or modify their original or more free-form applications whereas our PKI-based encryption does not interfere with other applications and works alongside them.
What are the limitations with Format Preserving Encryption?
Format Preserving Encryption (FPE) sounds cools but is limited to structured and well-defined Data sets where users know that they have (e.g. credit card numbers). Data is rarely this clean and neat in the real world.
FPE is limited to one algorithm, the Advanced Encryption Standard (AES) which NIST identified as “no longer suitable as a general-purpose FPE method. While AES can be part of your solution, it can’t be your entire solution.
Hyper FPE sounds even cooler but it requires significant trade-offs between Data protection and usability; our belief is that only inherent and invisible protection without user involvement is truly secure 100% of the time. Hyper FPE also requires that some Data be plain to run a certain type of analytics and applications.
What are the limitations of Multiparty Computation?
While Secure Multiparty Computation has the attractive property of being able to work on encrypted data without decrypting it, each application's software must be modified in order to benefit. This technology undoubtedly has its place, but is more suited to very specific applications rather than for general use. SecureAge technology is invisible to both applications and users means that it can be deployed into existing environments without disruption – and without expensive software updates.
What are the limitations of Tokenization?
Tokenized Data is dead weight in that you can’t actually use it for real-time analytics. Since users are aware of how the Data is tokenized, they can find ways to work around it if they choose to do so. Non-tokenized Data is still plain and can lead to identity theft or non-compliance; GDPR considers tokenized Data loss a reportable breach, unlike encrypted Data loss which is not.
Tokenization negatively impacts performance because it can’t take advantage of the AES-NI subset of Intel processors like encryption can, directly hitting the CPU.
Our technology has an 18-year history of ZERO Data breaches
Our founder, Dr Ngair Teow Hin combined more than a decade’s worth of research with his no-nonsense mindset to create SecureData. Ignoring outdated tribal knowledge, SecureData’s innovative PKI-based technology protects every file, every place, and every time.
This proactive and pervasive style of Data protection quickly attracted governments who were trying to overcome the problems caused by reactive systems, restrictive tools, and constantly changing cybersecurity policies. SecureData has been the encryption solution of choice for public entities in Singapore, Tokyo, and Hong Kong since 2003.
