In 2022, the industry witnessed a plethora of events and trends. The incessant ransomware and other malware attacks that plagued organizations globally were certainly among those that made headlines. From Twitter to Uber to student loan servicer Nelnet Servicing, over 4,100 publicly disclosed data breaches occurred in 2022 which led to more than 22 billion records being exposed.
Regarding the most notable events and trends to watch for in 2023, executives from Datadobi, DH2i, Folio Photonics, Retrospect and StorCentric had this to say:
Carl D’Halluin, CTO, Datadobi:
“Organizations will be forced to look for new approaches to manage unstructured data growth in 2023. Many have already noticed that the pace of unstructured data growth is snowballing exponentially faster than it has in the past. This leads to increased costs, as companies have to buy more storage, and the introduction of risk, as the organization has less knowledge about the data as it ages in its network. Organizations need new solutions to minimize the financial impact and risk their business faces.
Furthermore, much of this unstructured data is stored in network-attached storage (NAS). This is because many applications haven’t yet been redeveloped to leverage object storage. So, much of an organization’s unstructured data will continue to be stored on-premises in 2023. Because of this, public cloud providers will form more relationships with traditional on-premises NAS vendors. They will offer branded, cloud-based, managed file services. These services will benefit customers because they have a simple “on-ramp,” they preserve pre-existing documentation and processes, and they take care of the underlying hardware and operating environment for the customer.”
Steve Leeper, Vice President of Product Marketing, Datadobi:
“In 2023, businesses are going to have to prioritize environmental, social, and governance (ESG) policies to gain a competitive advantage. A recent PwC report found that over 80% of individuals are more likely to buy or work for an organization that stands for ESG best practices. And as of this year, only a little more than half of companies have an ESG plan in place or are actively planning for one.
Unstructured data plays a pivotal role in the success of an organization’s ESG policies. A holistic approach to reducing carbon footprint should bring unstructured data management into the conversation. When done with the right solutions, unstructured data management can enable organizations to move away from legacy models where data is stored in a digital ‘landfill.’ In these environments, data takes up money, space, and precious resources but gives very little in return. Organizations should be able to monitor their key ESG indicators and take actions on unstructured data to achieve their targets by moving data to the cloud or less polluting storage, deleting redundant, obsolete, or trivial (ROT) or orphaned data, enabling consolidation, reuse, and earlier shutdown of hardware. By doing so, IT leaders get a win-win of an effective approach to unstructured data management that also delivers on ESG objectives.”
Don Boxley, CEO and Co-Founder, DH2i:
“In 2023, I predict that SDP will finally pull-ahead of VPNs as the dominant technology for remotely connecting people and devices. One of the most critical drivers here will be awareness and acceptance. More and more IT professionals are already using it successfully to connect to cloud or on-premises applications from wherever they are – the airport to the home office to the local coffee shop, and they are talking about it.
Likewise, VPNs will slip in popularity as there is now a viable solution that can help IT professionals to overcome its inherent challenges. VPNs are buggy and the performance has always been spotty. VPNs are simply not reliable from a performance standpoint. And of course, the security issues are there, because of the way it is designed – inherent in the architecture. It allows for fast and easy lateral network attacks from bad actors. Previously, a relatively small portion of the workforce was dependent on it. So, the problems were more self-contained. However, over the past few years, with more and more people and organizations dependent on it, the risks have multiplied significantly.
In 2023, I also predict that developers will demand solutions that enable highly available cloud-native SQL Server availability groups (AGs) in containers, including support for Kubernetes (K8s) clusters – across mixed environments and across any type of infrastructure or cloud.
Kubernetes alone struggles to meet SQL Server production database HA requirements due to its prolonged pod/node-level HA failover of 2-10 minutes. What is required is a solution that can solve this problem by enabling highly available AG support in Kubernetes, which is an essential component to using stateful containers in production. The solution(s) must seamlessly complement K8s’ pod/node-level cluster HA, allowing Microsoft SQL Server users to confidently deploy HA SQL Server containers in production while meeting database HA requirements. Bottom-line, the ideal solution must combine with Azure Kubernetes Services and SQL Server to create a single, holistic solution for containerized SQL Server.”
Steve Santamaria, CEO, Folio Photonics:
“Data Storage will take on global warming. As the world continues to strive toward Net Zero, additional industries will come under the microscope. One industry heavily influenced by this will be the data storage industry. By 2025, data centers will consume >3% of the world’s electricity and storage can make up anywhere from 10-30% of a data center’s overall energy consumption. When there is a specific industry accounting for >1% of global electricity consumption, people start to take notice and ask what can be done to lessen the power burden. This will create an industry-wide push toward sustainable storage technologies that are more energy-efficient than legacy hardware.
This sustainability push comes at an intriguing time in the industry as well. We have recently seen newer SSDs actually use more energy than HDDs, which has not been the case until now. HDDs will continue to push toward consuming less energy, but their technology will continue to struggle in terms of power consumption per TB relative to others. For meaningful sustainability advancements to be made with HDD technology, the idle energy consumption will need to be lowered significantly. Tape will continue to show that it is the most energy-efficient product on the market, but the tight window on operating and storage conditions will be a looming cloud on their sustainability narrative. For meaningful sustainability advancements to be made with tape technology, their operating conditions will need to be made significantly wider.
Next, cold storage will steal the spotlight. There has always been considerable interest in hot storage, but the drive to $0/TB has started increasing momentum toward the cold storage segment. As new applications that generate and analyze massive amounts of data are developed, there will be an overwhelming interest in developing new cold storage strategies to keep data lakes cost-efficient, energy-efficient, and secure for long periods of time. We have already seen an increase in extremely high-capacity HDD, optical, and tape technologies being researched in many labs across the globe. It will be a growing challenge to keep cold storage accessible while keeping it cost-efficient. This will create an influx of investment in current technologies paired with additional investment in new technologies that have the potential to disrupt this emerging industry. We have seen this trend start to begin in 2022 as there were high-capacity HDDs released, new tape libraries announced, and rising interest in new types of optical storage media and DNA storage.
And in 2023, immutable storage will becomes increasingly commonplace. It is no secret that data has become a strategic asset. It is directly or indirectly tied to profitability for nearly every organization in the world today. Unfortunately, this means it’s becoming a high-value target for cybercriminals. The ever-growing threat of malicious actors will drive up demand for immutable storage. Not only will immutable snapshots be in high demand, but immutable media will find itself being implemented in storage architectures across every industry.
Last but not least, while I believe these trends to be those with the most momentum in the upcoming year, I do not believe they are the only ones we will see. New, emerging business models such as Hardware-as-a-service will grow in popularity and storage-as-a-service providers should see an uptick in market share as well. Lastly, the fragile dynamics of the industry will come under fire even more so in the upcoming year as the threat of a vertical market failure continues to rise. All of these trends, amongst others, will create an interesting upcoming year for the storage industry.”
Brian Dunagan, Vice President of Engineering, Retrospect:
“Freedom and flexibility will become the mantra of virtually every data management professional in the coming year. In particular, data management professionals will seek data mobility solutions that are cloud-enabled and support data migration, data replication and data synchronization across mixed environments including disk, tape and cloud to maximize ROI by eliminating data silos. We will likewise see an uptick in solutions that support vendor-agnostic file replication and synchronization, are easily deployed and managed on non-proprietary servers and can transfer millions of files simultaneously – protecting data in transit to/from the cloud with SSL encryption.
Ransomware will remain a huge and relentlessly growing global threat, to high profile targets and to smaller SMBs and individuals as well. There are likely a few reasons for this continuing trend. Certainly, one is that today’s ransomware is attacking widely, rapidly, aggressively, and randomly – especially with ransomware as a service (RaaS) becoming increasingly prevalent, looking for any possible weakness in defense. The second is that SMBs do not typically have the technology or manpower budget as their enterprise counterparts.
While a strong security defense is indispensable, we will see that next year security leaders will ensure additional measures are taken. Their next step will be enabling the ability to detect anomalies as early as possible in order to remediate affected resources. Large enterprises, SMBs and individuals alike will need a backup target that allows them to lock backups for a designated time period. Many of the major cloud providers now support object locking, also referred to as Write-Once-Read-Many (WORM) storage or immutable storage. Users will leverage the ability to mark objects as locked for a designated period of time, and in doing so prevent them from being deleted or altered by any user – internal or external.”
Surya Varanasi, CTO, StorCentric:
“The ransomware threat will continue to grow and become increasingly aggressive – not just from a commercial standpoint, but from a nation-state warfare perspective as well. Verizon’s 2022 Data Breach Investigations Report, reminded us how this past year illustrated, “… how one key supply chain incident can lead to wide ranging consequences. Compromising the right partner is a force multiplier for threat actors. Unlike a financially motivated actor, nation-state threat actors may skip the breach altogether, and opt to simply keep the access to leverage at a later time.” For this reason, channel solutions providers and end users will prioritize data storage solutions that can deliver the most reliable, real-world proven protection and security. Features such as lockdown mode, file fingerprinting, asset serialization, metadata authentication, private blockchain and robust data verification algorithms, will transition from nice-to-have, to must-have, while immutability will become a ubiquitous data storage feature. Solutions that do not offer these attributes and more won’t come even close to making it onto any organization’s short-list.
Consumer attitudes towards online security and privacy will also heighten. A key driver here will be that while enterprises getting hacked and hit by ransomware continue to make the headlines, cybercriminals have begun to hit not just enterprise businesses with deep pockets, but SMBs and individuals. SMBs and individuals/consumers are actually far more vulnerable to successful attacks as they do not have the level of protection that larger enterprises have the budgets to employ. As work from home (WFH) and work from anywhere (WFA) remain the paradigm for many across the data/analytics field, they will require data protection and security solutions that can also protect them wherever they are.
In the coming year, the ideal cybercrime defense will be a layered defense that starts with a powerful password, and continues with Unbreakable Backup. As mentioned, backup has become today’s cyber criminals’ first target via ransomware and other malware. An Unbreakable Backup solution however can provide users with two of the most difficult hurdles for cyber criminals to overcome – immutable snapshots and object locking. Immutable snapshots are by default, write-once read-many (WORM) but in the coming year, sophisticated yet easy to manage features like encryption where the encryption keys are located in an entirely different location than the data backup copy(ies) will become standard. And then to further fortify the backup and thwart would-be criminals in the coming year we will see users leveraging object locking, so that data cannot be deleted or overwritten for a fixed time period, or even indefinitely.”
Today Is Data Privacy Day
Posted in Commentary with tags Datadobi, DH2i, Folio Photonics on January 28, 2024 by itnerdData Privacy Day is today. Led by the National Cyber Security Alliance (NCSA), this event is a key part of a yearly global campaign focused on safety, security, and privacy. The theme for this year is “Take Control of Your Data.” It represents a worldwide endeavor to raise awareness about the significance of privacy respect, the protection of personal information, and the cultivation of trust.
Executives from Appdome, Datadobi, DH2i, Folio Photonics, Mission Cloud had this to say about this important day, and the incredibly important topic it represents:
Carl D’Halluin, CTO, Datadobi:
“On January 28, we celebrate Data Privacy Day. Initiated in the United States and Canada in 2008 by the National Cyber Security Alliance, its aim is to raise awareness and promote privacy and data protection best practices.
I would say the number one data privacy best practice is pretty simple: make sure you can get the right data to the right place at the right time. Wherever the data is in its lifecycle, it should be protected and only accessible as needed. Of course, this tends to be easier said than done. But, there is perhaps nothing more critical and imperative than implementing the right strategies and technologies to do so. After all, while data is an organization’s most valuable asset (in addition to its people), it also represents its greatest potential risk.
Balancing these two aspects is key. In other words, effective data management enables you to optimize your business intelligence, make faster and smarter decisions, and gain a competitive edge, as well as better meet business requirements such as internal governance and legal mandates, external regulations, and financial obligations and goals.”
Don Boxley, CEO and Co-Founder, DH2i:
“Data privacy isn’t just important for businesses – it is a matter of corporate survival. A company can make just one small mistake, neglect one small security check-box, and the consequences can be catastrophic. One small mistake could lead to a data breach that causes legal and regulatory fines, as well as irreparable damage to the company’s reputation — a nightmare from which recovery is near-impossible.
A software-defined perimeter (SDP) solution could be the answer! Many SDP solutions are engineered to provide secure network connectivity across on-prem, cloud, and hybrid environments. SDP enables its users to transform their traditional network-based perimeter security with a more sophisticated one that creates micro-perimeters around data. SDP enables secure connections between data centers and across private and public cloud platforms without needing a VPN or direct connect, thereby significantly reducing security vulnerabilities even further. In addition, for those focused on data protection and privacy, SDP enables the ability to create secure tunnels for specific applications, as opposed to entire network access. Ideally, such a solution would be streamlined and straightforward to manage, equipped with an intuitive interface that eases the configuration, and ongoing management of secure connections. This combination — increased security, ease-of-use, and adaptability – makes SDP the ideal choice for protecting data and ensuring data privacy.”
Steve Santamaria, CEO, Folio Photonics:
“On Data Privacy Day, we are reminded of the business-critical importance of safeguarding sensitive information – both professional and personal – at a time when data breaches and cyber threats have become all too common. For data protection professionals, this should not be viewed as a gentle nudge but rather a polite – yet strong shove toward reviewing and fortifying the technology and policies that serve as the underpinnings of your data protection strategy.
How can anyone not admire those responsible for their organization’s data protection? As we in the business know – it’s no walk in the park! The good news is of course, that smarter and more powerful technology solutions continuously enter the marketplace, ready to take their place in the data protection professional’s arsenal. Active archives built on an optical storage foundation can offer an ideal data protection solution for several compelling reasons. Firstly, they provide a high level of security as data stored on optical discs is read-only, rendering it resistant to cyber threats like ransomware. Optical storage is also highly durable — able to withstand physical damage from factors like magnetic fields, moisture, and temperature fluctuations, ensuring the safety of critical data. What’s more, optical storage media boasts a long lifespan, making it ideal for data archival and compliance requirements while also being cost-effective in the long term. And last but certainly not least, it can be easily air-gapped – adding a virtually impenetrable defense against a cyber-attack.
Retrieving data from optical storage is quick and reliable due to fast read speeds, making archived data readily accessible. And if that isn’t enough — it is environmentally friendly, consuming less energy and having a lower carbon footprint compared to alternative storage options.”
Alan Bavosa, VP of Security Products at Appdome:
In the spirit of Data Privacy Week, we should champion initiatives that prioritize security and resiliency.
Protecting consumer data and privacy isn’t just about how a company uses their data internally or with partners, it is how it’s guarded from wider threats, such as cyber attackers. In fact, data privacy and cybersecurity are intrinsically interlinked – you can’t ensure consumer data is kept private if you don’t prioritize cybersecurity. And this includes the protections on a brand’s mobile app offering, especially as mobile stands as the dominant channel for people’s interactions, fueling criminals to eagerly infiltrate apps.
If brands don’t pay attention to how they protect their consumers via mobile apps, they are putting themselves at a huge commercial and reputational risk as customers may leave. For instance, nearly three-quarters of global mobile consumers stated that they’d be likely or very likely to stop using an app and tell their friend to stop using it too following a data breach or if they discovered that it didn’t protect their data.
Clearly, brands that do have privacy and security built into their mobile applications have a lot to benefit. Not only will it address cybersecurity fears and build consumer trust, but it will put them on course to comply with regulations such as DORA (Digital Operational Resilience Act) and NIS 2 Directives that both require cybersecurity resilience.
Ryan Ries, Chief Data Science Strategist at Mission Cloud:
Data Privacy is a very difficult topic to try and understand because there are so many rules and regulations that are constantly changing and are different state to state and country to country. People have to look at what kind of data they have and understand all the rules associated with it which is very time consuming and a serious endeavor. We often see customers that had this under control when they were a smaller company, but as they grow they have to really focus on ensuring they are doing the right things with the data and understanding what rules it falls under. There are so many different layers to data privacy and how you handle it, does it fall under PII, PHI or HIPAA? Do I need to worry about GDPR or data residency? There is a lot to consider and you need to be diligent that you are handling your data properly.
1 Comment »