Salesforce To Announce Acquisition Of Crypto Provider

SaaS providers purchase of Navajo Systems could help allay concerns of some cloud security skeptics, experts say

Salesforce.com has quietly snapped up an Israeli cloud security encryption firm and is expected to announce the acquisition at its Dreamforce conference next week in San Francisco,
Dark Reading
has learned. The move by Salesforce to add encryption to its portfolio goes to the heart of reservations about trusting cloud providers to protect their customers data.
The number one reason organizations dont adopt cloud computing more broadly is the lack of ability to protect information in the cloud, says Bob West, CEO of EchelonOne. Salesforce itself doesnt encrypt information, but it does a pretty good job at protecting data [in general].
One of the key elements to Navajo Systems technology, a virtual private cloud encryption gateway that encrypts all data before it goes to the cloud including Salesforce.com, is that the customer controls the encryption keys. The enterprise should be holding onto the encryption keys so if someone gains access to their information, they dont also have access to the keys, West says.
Salesforce isnt saying just yet how it will incorporate Navajo Systems technology into its services, nor would a spokesperson for the SaaS firm reveal any details about the acquisition. Navajo Systems did not respond to press inquiries, and its
website appears to have been taken down
. A message on the site reads: Navajo Systems has decided to pursue a different strategy, and it includes a contact name.
Security analysts say the acquisition of Navajo Systems by Salesforce could help reassure skeptical organizations looking for providers to offer encryption solutions for locking down their data in the cloud. Its going to help for some medium-sized enterprises who can now check the box and say my data is encrypted at Salesforce, says John Pescatore, vice president and distinguished analyst at Gartner.
But large enterprises dont typically trust their cloud provider to both store their data and encrypt it, he says. Larger companies dont want their data to ever be decrypted at Salesforce or other cloud providers, he says. They want to keep encryption separate from their SaaS.
Pescatore says its possible that Salesforce could still offer Navajo like it does today as one of its application vendors, with the keys stored at the users site for organizations that dont want Salesforce to do all of the encryption. There will be plenty of choices for separate encryption-as-a-service, he says.
There are a handful of other companies that provide cloud encryption, and its unclear just how Salesforce will or will not work with them in the wake of the Navajo acquisition.
But encryption is just one element of security for cloud services. Encryption is the easy part. Key management is the hard part, Gartners Pescatore says. Wherever the keys are, thats the exposure. If the keys are managed by Salesforce and the data is stored by them, theres only a certain level of security. Thats why many organizations want to keep encryption separate.
Have a comment on this story? Please click Add Your Comment below. If youd like to contact
Dark Readings
editors directly,
send us a message
.

Last News
▸ Making use of a homemade Android army ◂ Discovered: 23/12/2024 Category: security	▸ CryptoWall is more widespread but less lucrative than CryptoLocker. ◂ Discovered: 23/12/2024 Category: security	▸ Feds probe cyber breaches at JPMorgan, other banks. ◂ Discovered: 23/12/2024 Category: security

**Cyber Security Categories**
Google Dorks Database	Exploits Vulnerability	Exploit Shellcodes

CVE List

Tools/Apps

News/Aarticles

Phishing Database

Deepfake Detection

Trends/Statistics & Live Infos

Tags:
Salesforce To Announce Acquisition Of Crypto Provider