New PCI Compliance Guidelines Set New Standards For Cloud Security
Companies unsure about the Payment Card Industry’s requirement to secure data in the cloud don’t need to wonder anymore.
On Tuesday, the PCI Security Standards Council clarified its guidance for storing and processing financial and transaction data in virtualized systems, a key component of almost all cloud architecture. In its "Information Supplement: PCI DSS Virtualization Guide," the group states that virtualization technology brings unique risks when used with cardholder data — data that goes into that cloud is still subject to the PCI Data Security Standard.
Improving the Security of Cloud Computing
On-demand cloud computing and data storage can save companies money, but many businesses—particularly in finance and health care—are wary of handing data to third parties, fearing hacking, accidental data loss, or theft by rogue employees of cloud providers.
New security solutions are appearing: One verifies cloud providers’ claims that your data is safely lodged on its own server. Another protects your cloud-based data by using a math function to divide it into 16 segments, any 10 of which can be used to re-create the entire original set.
ActiveState Expands Platform-as-a-Service Cloud Tech for Perl
VMware Launches vFabric 5 for Virtual and Cloud Environments
VMware announced vFabric 5, an integrated application platform for virtual and cloud environments.
The new vFabric 5 platform combines VMware’s Spring development framework for Java with the latest generation of vFabric application services to provide the core application platform for building, deploying and running modern applications, Dave McJannet, director of product marketing at VMware, told eWEEK.
VMware to buy Digital Fuel Technologies for cloud cost management
VMware is to acquire Digital Fuel Technologies, a vendor of IT financial management software that helps companies determine the cost of IT services.
The terms of the acquisition, which is scheduled to close in July, were not announced.
VMware’s vice president of marketing, Ramin Sayar, said that it decided to acquire the company to provide its customers with better tools to manage IT systems.
HP CIO Randy Mott leaves amid company management restructure
Hewlett-Packard’s CIO, Randy Mott, has left the company amid an organisational restructure.
HP said its organisational changes will more closely align its corporate structure with its overall strategy to build its cloud and software services portfolio for customers.
As a result, HP has scrapped the chief administration officer role and plans to extend the role of the CIO.
Will businesses opt for SaaS in next ERP lifecycle?
As ERP systems near the end of a current lifecycle, CIOs are assessing upgrades or replacements. With firms such as Salesforce.com, NetSuite and RightNow offering alternative software-as-a-service (SaaS) ERP systems, should businesses move to the cloud?
Homomorphic encryption: Can it save cloud computing?
Homomorphic what? My Oxford English Dictionary suggests the following definition: "Pertaining to two sets that are related by a homomorphism."
Come on. Let’s try homomorphism: "A transformation of one set into another that preserves in the second set the relations between elements of the first."
Put homomorphic with encryption and thankfully Wikipedia provides something useful: "A form of encryption where a specific algebraic operation performed on the plain text is equivalent to another (possibly different) algebraic operation performed on the cipher text."
Dedupe and the Cloud: Is There a Problem Here?
One of the most effective tools for managing increased data loads to have emerged over the past 10 years is deduplication. Figures vary, but it’s not hard to imagine redundant data rates at some enterprises hitting the 50 percent mark, particularly in email systems.
But just because dedupe is good technology, does it follow that it is also good policy? Increasingly, flags are being waved that dedupe can produce a number of unintended consequences, particularly of the regulatory and legal variety.