now that you’re smart, don’t be stupid! - natoa · * source: thales e-security & ponemon...
TRANSCRIPT
Copyright © Ciena Corporation 2016. All rights reserved. Confidential & Proprietary.
Now That You’re Smart, Don’t Be Stupid!
Patrick Scully Director, Product Line Management Networking Platform Division
At-rest Encryption
In-flight Encryption
Server & Database Security
Are you doing everything you can to protect your data?
Fibre Channel
SONET/SDH
Ethernet
Traditional Encryption Solutions Can Be Cumbersome and Costly
Throughput comparison at different frame sizes
L2/L3 solutions can significantly increase network latency Sensors and command & control systems are sensitive to latency
Amazon reported a one percent revenue increase for every 100 milliseconds of improvement to their site speed.*
* Source: https://www.lireo.com/website-speed-the-power-of-one-second-infographic/
Optical encryption solutions encrypt ALL in-flight data
Any Protocol
Healthcare Secure ultra-low latency transport for highest quality healthcare and efficient collaboration, complying with HIPAA requirements for protecting health information
Ensure infrastructure networks (e.g. power generation and grid) are secure while maintaining application performance with near zero incremental latency Utilities
Protect sensitive citizen and agency data with FIPS-certified encryption that complies with NIST and DHS requirements, as well as Suite B algorithms Government
• Partition and aggregate traffic from various applications, and bulk encrypt the link
FLEXIBLE CAPACITY
• Ensures proper implementation of cryptographic algorithms and standards (e.g. FIPS, Suite B)
3RD PARTY CERTIFICATION
• Eliminates human error • Guarantees all traffic is always encrypted 24/7
ALWAYS-ON ENCRYPTION
• Provides dedicated key management interface for partitioned control of all security parameters
DEDICATED KEY MANAGEMENT
• Deploys the strongest public key algorithms available including AES-256 and ECC algorithms
• Fast (every second!) key rotation
STRONG CRYPTOGRAPHY
Elliptic Curve
Cryptography
• Offers ultra-low latency & programmable modulation for optimal network performance
ENCRYPTION IN COHERENT DSP
Security Officer / Enterprise managed keys
Transport Network is Managed Separately
* Source: Thales e-Security & Ponemon Institute© Global Encryption & Key Management Trends Study April 2015
56% Encryption key and certificate management is painful Enterprises rated the “pain” associated with managing keys/certificates as severe*
Optical encryption solutions should include simplified end-user security management
Over 1200 10G encrypted links deployed 100G/200G encryption not only a large enterprise play – now deployed with US utilities and government agencies
Scaling 10G, 100G and 200G encryption to a variety of applications
Demand for 200G encryption is real