Decru Integrates With Sun For Trusted Application Platform

Decru, Inc., the leader in networked data storage security, today announced a joint initiative with Sun Microsystems, Inc. (NASDAQ: SUNW) to build secure application environments, and has joined the Sun iForce partner program. The Trusted Application Platform (TAP) integrates security capabilities from Sun and Decru that span servers, networks and storage, delivering unprecedented protection for sensitive data and applications. The TAP solution combines capabilities including role-based access controls, labeling, hardware-based encryption and key management, and secure logging to create the industry's most secure open systems platform for applications.

Enterprises and government agencies have grown increasingly concerned about the security of their critical applications and data. Key drivers for security investment include regulatory compliance, intellectual property protection, homeland security, customer privacy and internal controls. Historically, security solutions such as firewalls and intrusion detection systems have been deployed at the network perimeter, but these systems fail to address the 50-80 percent of attacks that originate behind the firewall (source: FBI/CSI). To make matters worse, the rapidly increasing storage demands of recent years have led many organizations to consolidate their data in networked storage, where a single breach can expose terabytes of sensitive information.

Inside The Trusted Application Platform
Effective application security requires protection of data in every segment of the system, including servers, operating systems, networks and storage. The Trusted Application Platform integrates the Sun Solaris Operating System (OS), including Trusted Solaris security features, with the Decru DataFort storage security appliance to create a secure, integrated application environment. Capabilities such as strong authentication, compartmentalization, auditing and fine-grain access controls are implemented across the TAP solution, and can be integrated for seamless end-to-end protection.

The Solaris OS coupled with Trusted Solaris OS features provides built-in security in a commercial-grade OS. Granular Role-based Access Controls (RBAC), label security, device binding and extensive auditing provide a highly secure environment for sensitive applications. A subset of these features is also available in the Solaris 9 OS. Trusted Solaris has achieved Common Criteria certification at the EAL-4 level.

"The Trusted Application Platform builds on the unique strengths of Sun's Trusted Solaris OS to deliver military-grade security for government and enterprises alike," said Martin Hack, Senior Product Manager for Trusted Solaris at Sun Microsystems. "Customers are asking for end-to-end security solutions, and we believe the Sun-Decru solution can deliver exactly that."

Decru DataFort storage security appliances are integrated with the Solaris OS to enforce end-to-end compartmentalization, authentication, access controls and secure logging. DataFort provides strong wire-speed encryption and secure access controls for data in storage and in transit; the solution can be transparently deployed in SAN, NAS, DAS, and tape storage environments with no changes to servers, desktops, applications, or user workflow. DataFort is currently completing FIPS 140-2 Level 3 government certification for its secure hardware, cryptography and key management.

"The Trusted Application Platform addresses an urgent and longstanding challenge - end-to-end security for sensitive applications," said Kevin Brown, vice president of marketing at Decru. "Working closely with Trusted Solaris security features, Decru DataFort extends security from the server to the entire storage network."

About Decru
Decru, headquartered in Redwood City, CA, develops storage security solutions to address a range of business needs for enterprises and government, including intellectual property protection, regulatory compliance, privacy, and internal controls.

Decru DataFort protects the core of the storage network with a layer of strong encryption, authentication, access controls and compartmentalization. Decru DataFort appliances can be deployed transparently in SAN, NAS, DAS and tape backup environments, with no changes to servers, desktops, applications, or user workflow.

Decru was founded in 2001, and has raised more than $45 million in venture financing from Benchmark Capital, Greylock, New Enterprise Associates, In-Q-Tel and others.