It is always important to protect your system against external threats, namely hackers, but it is also important to protect against internal threats.
The magnitude of the damage from an insider threat can be appreciated by the example of Edward Snowden, who worked for the NSA, and had access to thousands of classified documents, networks, and NSA systems.
« According to a recent Verizon report, insider threats accounted for about 14% of 2013 data breach incidents.
To avoid the risk of malicious employees misusing sensitive data, the CloudFlare released an open source encryption software called “Red October” [ Red October ] , with encryption - decryption of files in the style of "two-man rule” [two-man rule].
The “two-man rule” is a control mechanism intended to achieve a high level of security for particularly critical information, such as military secrets, where data decryption will only work when two or more people provide the keys.
“It comes from military history, where a nuclear missile could not be launched unless two people agreed to turn their starting keys at the same time. This requirement was introduced in order to prevent one person’s mistake (or intentional) starting World War III.”
All communication with the “Red October” is encrypted with TLS, ensuring that passwords are not sent unsecured.
Each user has a unique, randomly generated RSA key pair. The user's private key is then encrypted with another key derived from the user's password and then salted using scrypt. Red October data encryption generates a random 128-bit AES key.
To decrypt a file, the end user must be the administrator with the correct password. If two end users are on the list of valid users, having transferred their keys, then and only then will decryption occur.
To prevent unauthorized access to decrypt data, the Red October server will not decrypt the user's keys without their password.
We know, all of this is difficult and for some incomprehensible, but safe. If you want to upload your data to the cloud then you should think about how you will safeguard something that is not in your home.
The software is freely available as an open source application on GitHub .
📧
Subscribe to the SecNews Newsletter
