NetApp unveils post-quantum encryption & AI for data defence

NetApp has introduced new data security features designed to enhance cyber resilience at the storage layer for its customers.

The recent months have seen an escalation in the sophistication of cyber attacks, with cybercriminals increasingly using advanced tools such as generative AI and stockpiling encrypted data, waiting for decryption tools to catch up. The Australian Cyber Security Centre (ACSC) continues to stress data encryption as a fundamental security recommendation, but warns that not all encryption methods offer equal protection and that even encrypted data can sometimes be exploited.

Addressing the evolving cybersecurity landscape, NetApp is embedding post-quantum cryptography across its data storage portfolio. This change is designed to position customers to better defend themselves against both current and emerging threats, particularly as the potential of quantum computing draws closer to mainstream use.

NetApp is introducing a suite of new security capabilities for its storage platforms. These updates include the addition of post-quantum cryptography to protect file and block workloads, reinforced ransomware protection via BlueXP with new role-based access controls, expanded BlueXP backup and recovery options, and enhanced security assessment services.

Gagan Gulati, Senior Vice President and General Manager, Data Services at NetApp, said: "Security teams need to factor storage into their security strategies because it is the last line of defence for their data and the right storage can play an active role in protecting the enterprise."

He continued: "Backup and recovery is an important part of security at the storage layer, but NetApp's comprehensive security capabilities expand the role of primary storage with built in automated ransomware detection and response that enable customers to take a proactive approach to keep their data secure. With built-in security capabilities that secure our customers' data on any workload, anywhere, NetApp has made storage as critical to a sound cybersecurity strategy as perimeter and endpoint security tools."

The company's new post-quantum cryptography solution incorporates encryption algorithms that meet standards set by the US National Institute of Standards and Technology (NIST). NetApp's position is that this will provide robust protection against both classical and quantum-based attacks, giving organisations, partners, and regulators greater assurance about the security of stored data.

Updates to the NetApp BlueXP ransomware protection introduce new features such as ransomware-specific role-based access control, giving security teams more precise permissions management for countering ransomware threats. There is also expanded support for native cloud workloads, allowing enterprises to adapt to an increasingly complex threat landscape.

The BlueXP backup and recovery function now offers a redesigned user interface and makes it easier for customers to implement a 3-2-1 data protection strategy. This strategy involves keeping three copies of data, on two different media, with one copy offsite. Support extends to key workloads and applications, including Microsoft SQL Server, VMware, and Kubernetes.

Expanded security professional services from NetApp aim to help organisations evaluate and reinforce their security posture, enabling the built-in security features provided by the company's storage products.

Research findings indicate a widespread impact of security incidents on enterprises. Krista Case, Research Director for The Futurum Group, stated: "Building resiliency against cyber-attacks into the data storage infrastructure has never been more important. Approximately 80% of respondents in our Cybersecurity Decision Maker IQ research indicated having experienced a significant security incident over the past 12 months, and 40% counted data loss and compromise as one of the most significant consequences of their organisation's worst security incident."

Case added: "NetApp is building critical cyber-resiliency capabilities into its data storage infrastructure and services, including granular role-based access controls to help thwart the onslaught of malicious access attempts, and quantum-safe data encryption capabilities."

The new security capabilities build on NetApp's existing offerings, which include ransomware protection, disaster recovery, data classification, and integration with SIEM tools for comprehensive risk management. NetApp's ONTAP Autonomous Ransomware Protection with artificial intelligence (ARP/AI) is designed to detect ransomware across hybrid cloud environments, with plans to extend such protection to block storage workloads later this year.