Cyber Security
ETSI released new specification to secure sensitive data in the cloud
ETSI's Technical Committee on Cybersecurity (TC CYBER) has released a new specification to help secure sensitive data in virtualized environments. ETSI TS 103 457 tackles the challenge of secure storage - where organizations need to protect customer data when using a cloud that is not under their direct control.
The new specification TS 103 457 standardizes an interface between a "secure vault" that is trusted and a cloud that could be anywhere, where such sensitive data is stored in the vault. This allows a sensitive function to exist in a lower security environment, with data held securely. The interface can also be used to search databases that hold private data. Another feature defined in the specification is a logging function that allows queries of customer data to be audited, making it easier to detect data breaches, which in turn deters malicious activity.