CipherCloud

CipherCloud
Industry Information privacy
Founded (2010 (2010))
Founder Pravin Kothari
Headquarters San Jose, California, United States
Key people
 Pravin Kothari, Founder & CEO
John M. Jack, Board[1]
Gilles Samoun, Board
Website www.ciphercloud.com

CipherCloud is a cloud security company based in San Jose, California. The company enables cloud services adoption while ensuring security, compliance and control. CipherCloud develops secure gateways that locally encrypt sensitive information before it is stored in cloud environments.

History

CipherCloud was founded in 2010 by Pravin Kothari, who previously co-founded ArcSight. [2][3] The company launched in February 2011 and worked solely in Salesforce.com environments initially.[4] It added Amazon Web Services integration in 2011.[5] CipherCloud raised $1.4 million in seed funding from Andreessen Horowitz later that year.[2] CipherCloud released its Gmail encryption solution in June 2012.[6] By September 2012 CipherCloud's platform could also encrypt Force.com, Chatter, Microsoft Office 365.[7] It also launched Connect AnyApp, which allowed users to "simply specify fields on Web pages to be encrypted," and data format and operations would be preserved.[7]

CipherCloud closed a $30 million funding round led by Andreessen Horowitz and Index Ventures in December 2012.[8][9] Deutsche Telekom also participated in the funding round through T-Ventures, the telecommunications company's venture capital arm.[10] John M. Jack, a partner at Andreessen Horowitz and former CEO of Fortify Software, joined the CipherCloud board following the investment.[8][9] The company opened its European headquarters in London, England in the same month.[5] CipherCloud added an Australian headquarters in 2013.[11]

In February 2013, CipherCloud joined Box Inc. (formerly Box.net), an online file sharing and cloud-content management service, to bring CipherCloud's encryption to file-sharing and file-hosting services such as Box.[12] In January 2014, CipherCloud acquired CloudUp Networks.[13] CloudUp Networks developed software that helped users track data as it moved through cloud environments and restricted that data from leaving the cloud without authorization.[14]

In April 2013, CipherCloud filed a Digital Millennium Copyright Act takedown notice and defamation complaint against Stack Exchange Network for its users posting a discussion titled "How is CipherCloud doing homomorphic encryption?"[27], which were critical of the company claims it was using homomorphic encryption. CipherCloud claimed that the post contained copyrighted marketing material to criticize the company. The takedown complaint was dismissed.[28]

In April 2014 CipherCloud released a new product, CipherCloud for Cloud Discovery.[15] Cloud Discovery analyzes cloud applications, which enterprises use for visibility and determine the risk of applications within the organization.[16][17] According to Forbes, Cloud Discovery analyzes cloud applications such as "CRM, finance, HR, IT management, file sharing, collaboration, and productivity."[18]

In November 2014, the company announced closing its Series B funding round of $50 million. Transamerica Ventures led the round, joined by Delta Partners, and existing investors Andreessen Horowitz and T-Ventures, the venture capital arm of Deutsche Telekom.[19]

Platform

CipherCloud's platform serves as a gateway that encrypts data in realtime before sending the data into a cloud environment via Searchable Strong Encryption (SSE), using standard cryptographic modules validated by FIPS 140-2. The data is only decrypted when an authorized user retrieves data from the cloud and the data is returned.[10] Encryption keys are stored locally, never leave the user’s site and are not shared with the cloud provider.[20][21] The platform is also capable of using tokenization, which is the process of substituting a sensitive data element with a non-sensitive equivalent.[4] It also offers data loss and malware detection and monitoring for cloud environments.[11]

CASB+ Platform

CipherCloud announced[22] a new CASB+ platform on April 12, 2018. The CipherCloud CASB+ platform brings announced capability for enhanced visibility, end-to-end data protection, advanced threat protection, and comprehensive compliance. This signals a major expansion of the CipherCloud product line. This is a highly compact summary of the technical capabilities announced by CipherCloud.

VISIBILITY.

  • CipherCloud CASB+ extends visibility to the complete cloud infrastructure. CipherCloud CASB+ provides automated discovery of "shadow IT" and cloud resources being used across the entire enterprise. This deep visibility is captured in activity logs to support compliance reporting, audit, and forensic investigation.

DATA SECURITY.

  • CipherCloud provides ZERO TRUST ENCRYPTION in support of cloud deployments. CipherCloud Zero Trust encryption happens at the boundary of the enterprise. This means data remains 100% encrypted when at rest, during network transit, in the cloud application layer, API, middleware, memory, in use (e.g. search, sort), and during any other possible activity within the cloud. Data encryption keys are solely held by the customer for meeting compliance and maximizing the protection of data. CipherCloud CASB+ also provides TOKENIZATION as an adjunct to the encryption capability. Tokenization is an essential technology for meeting many compliance regulations.
  • DATA LOSS PREVENTION (DLP). CipherCloud DLP identifies content in real-time and ensures sensitive data is discovered in both structured and unstructured Salesforce objects. When there are policy violations, CipherCloud DLP will enforce actions to include alerts, restricted sharing, or automatic encryption of sensitive files. Customers can integrate DLP policy with existing on-premise enterprise DLP systems.
  • DIGITAL RIGHTS MANAGEMENT (DRM). CipherCloud includes native DRM for secure offline data access. Data that is downloaded from a SaaS application to a user’s device can still be protected based on predefined policies. In the event that downloaded data needs to be protected from misuse, administrators have the ability to retract access to the data, even if it was downloaded and copied to another device, stolen or even lost. CipherCloud CASB+ is also integrated with major 3rd party DRM packages such as Microsoft’s.

THREAT PROTECTION

  • USER ENTITY AND BEHAVIOR ANALYTICS (UEBA). CipherCloud CASB+ includes advanced threat protection capability to keep clouds secure and protected. UEBA capability uses machine learning to monitor user activity, including time of day of activity, attempts at bulk file download, and other anomalous behavior.
  • ADAPTIVE ACCESS CONTROL (AAC). CipherCloud CASB+ includes adaptive access control that can also block access, even to what appear to be authorized users, based upon platforms used, time of day, originating location, and more that might suggest the theft, compromise of authentication credentials, or a sophisticated cyberattack.
  • ANTIVIRUS ANTIMALWARE PROTECTION (AVAM). Virus, malware, and ransomware protection is provided by anti-virus anti-malware (AVAM) scanning. URL link protection and on-premise sandbox integration enable discovery and remediation of even the most challenging Zero-Day threats.

GLOBAL COMPLIANCE SUPPORT.

  • CASB+ ARCHITECTURE SUPPORTS GLOBAL DEPLOYMENT AND LOCAL COMPLIANCE. The CipherCloud CASB+ architecture enables the largest multinational to deploy in alignment with complex compliance regulations such as the European Community General Data Protection Regulation (GDPR), HIPAA, PCI, GLBA, SOX, and many other regulations around the world. The hybrid deployment option allows any enterprise to manage one integrated secure deployment for key cloud applications across multiple countries with controls and key management configurable to address a broad variety of differing regulatory requirements for data privacy, data protection, data sovereignty, and data residency. The CASB+ platform can also support any combination of customer-controlled keys, for multiple applications, in configurations that can include one or more on-premise key management systems.
  • DATA RESIDENCY. Many countries have data protection laws that stipulate the processing of personal data for citizens must occur within the country (“data residency”) or within regions for which there is an adequate level of data protection (e.g., EU GDPR). Most cloud providers cannot ensure data residency because data can be moved between multiple regions, accessed by “command and control” in other countries, or accessed by remote support services offered across regions. Many global organizations have not been able to adopt cloud applications without deploying the additional security controls for data residency provided by CipherCloud CASB+.

CASB+ CONNECTORS.

  • CASB+ also offers application connectors to support many popular SaaS-based business applications, including SAP® SuccessFactors, ServiceNow®, Office365®, Adobe®, Box®, DropBox®, SAP® S/4HANA, SAP® Hybrid Cloud, and many others.
  • CipherCloud CASB+ AnyApp connector allows customers to integrate their own custom cloud-based applications.

Recognition

In June 2016, CipherCloud was awarded "Best Cloud Computing Security Solution" at the SC Magazine 2016 Awards. [23]

In February 2014, Pravin Kothari was awarded the "CEO of the Year" at the 10th Info Security Global Excellence Awards.[24]

In February and April 2013, CipherCloud received SC Magazine's Excellence Awards for the "Information Security Product of the Year" [25] and the "Best Emerging Technology in Information Security".[26]

In April 2011, Gartner named CipherCloud one of its "Cool Vendors" in cloud security.[27]

References

  1. ↑ Delevett, Peter (5 December 2012). "Wiretap: Marc Andreessen Knows Jack". Silicon Beat. Retrieved 28 August 2014.
  2. 1 2 Tom Taulli, "CipherCloud Gets $30 Million to Defend the Cloud," Forbes, December 5, 2012
  3. ↑ "Ten Years In, Gmail Still Evolving Through Use of Encryption". recode. 4 April 2014.
  4. 1 2 Andrew R. Hickey, "CipherCloud Uses Encryption, Tokenization to Bolster Cloud Security," CRN, February 14, 2011
  5. 1 2 "CipherCloud extends cloud data encryption to AWS". Telecompaper World. 27 October 2011.
  6. ↑ "CipherCloud unveils Gmail encryption solution". Internet Business News. 11 June 2012.
  7. 1 2 Rutrell Yasin, "CipherCloud Encrypts Data Across Multiple Cloud Apps," GCN.com, September 6, 2012
  8. 1 2 Arik Hesseldahl (December 5, 2012). "CipherCloud Lands $30 Million From Andreessen Horowitz". All Things D. Retrieved 28 March 2014.
  9. 1 2 Richard Nieva (December 5, 2012). "On cloud a16z: CipherCloud raises $30M from Andreessen Horowitz". PandoDaily. Retrieved March 28, 2014.
  10. 1 2 Mikael Ricknäs (March 4, 2014). "Deutsche Telekom works with CipherCloud to protect hosted apps". PC World. Retrieved March 28, 2014.
  11. 1 2 Rohan Pearce, "Business Booms for Cloud Encryption Provider After PRISM Revelations," TechWorld, August 22, 2013
  12. ↑ "SC Magazine, February 25, 2013
  13. ↑ Alex Williams (January 16, 2014). "CipherCloud Acquires CloudUp Networks To Beef Up Its Cross Platform Data Tracking". TechCrunch. Retrieved March 28, 2014.
  14. ↑ Cromwell Schubarth (January 16, 2014). "Cloud security startup CipherCloud buys CloudUp Networks". Silicon Valley Business Journal. Retrieved March 28, 2014.
  15. ↑ Arnal Dayaratna (5 February 2014). "CipherCloud Releases Cloud Discovery To Enable Enterprises To Detect Cloud Application Usage". Cloud Computing Today. Retrieved 2014-06-24.
  16. ↑ Mike Vizard (2014-04-30). "CipherCloud Adds Risk Scoring to Free Cloud Application Discovery Tool". IT Business Edge. Retrieved 2014-06-24.
  17. ↑ "Cipher Cloud Launches Tool to Monitor Shadow IT Use". Information Security Buss. 30 April 2014. Retrieved 21 July 2014.
  18. ↑ Ben Kepes (2014-04-30). "CipherCloud Rolls Out A Free Enterprise Cloud Application Discovery Tool". Forbes. Retrieved 2014-06-24.
  19. ↑ https://www.forbes.com/sites/benkepes/2014/11/19/ciphercloud-scores-monster-series-b/
  20. ↑ "Is Cloud Data Encryption the Answer to Patriot Act Fears?" SafeGov.org, November 9, 2012
  21. ↑ Shaun Waterman, "Email Encryption Services Suddenly Close Over U.S. Snooping," The Washington Times, August 18, 2013
  22. ↑ "CipherCloud CASB+ Announcement".
  23. ↑ SC Magazine. "SC Magazine Awards 2016". SC Awards Europe 2016. Retrieved 2016-07-06.
  24. ↑ "CipherCloud Honored for CEO of the Year and Five Product Categories at the 10th Annual 2014 Info Security Global Excellence Awards". The Business Journal. Retrieved 27 June 2014.
  25. ↑ "SC Magazine Awards Europe 2013 - winners announced". SC Magazine. Retrieved 6 July 2014.
  26. ↑ "2013 WINNERS". scmagazine.com.
  27. ↑ "Cool Vendors in Cloud Security Services, 2011". Gartner. Retrieved 6 July 2014.
This article is issued from Wikipedia. The text is licensed under Creative Commons - Attribution - Sharealike. Additional terms may apply for the media files.