Scalar Security Framework
A comprehensive tape storage framework for cyber protection and data security.
Delivering the Most Secure Tape Systems – A Key Part of Cyber Resilient Infrastructures
Tape has emerged as a critical part of building cyber-resilient infrastructures, particularly for long-term archives, cold storage, and backup data. Tape is inherently more secure than flash (SSD) or disk-based (HDD) storage because of the nature of tape, but even tape systems can be made more secure. That is why Quantum developed the Scalar® Security Framework, which is a comprehensive security framework that controls system access, provides system monitoring and event detection, data security and encryption, and unique features for cyber protection and data integrity.
Exclusive Features Provide Multiple Levels of Cyber Protection and Resiliency
When it comes to data integrity and cyber protection, Quantum Scalar Tape systems offer three specific features that provide increasing levels of security for protecting data stored on tape.
- Active Vault
- Logical Tape Blocking
- Ransom Block
- Additional Security Features
Active Vault enables tapes to be moved into a secure, isolated in-library vault partition that is not visible to applications and has no network connectivity. Active Vault works with any application and provides an additional layer of security for media without needing to handle the tapes or remove them from the library. To address the risk of the application and/or the tape library of being hacked, Logical Tape Blocking (Level 2) and Ransom Block (Level 3) build on Active Vault to further insulate data.
Logical Tape Blocking is a logical policy-based block that’s placed on a tape magazine. When a tape is moved into a covered magazine, Logical Tape Blocking denies future requests to move that tape elsewhere, such as into a drive. To allow blocked tapes to be accessed again, the magazine must be ejected from the library and then re-inserted, operations which require the operator to be physically present at the library. Tape Block may be enabled remotely but can only be disabled using the local library operator panel, again requiring physical presence in the data center. Tape Block may be used on its own but is ideally used with Active Vault and Ransom Block to provide the best security.
Quantum Scalar Ransom Block employs a simple and unique concept to create a physical barrier between data stored on tapes and the network connected tape library. Tapes stored in the library sit in a magazine. Quantum’s patent-pending design partially ejects the magazine so the tapes cannot be picked by the robot until an operator physically re-inserts the magazine. Because the magazine is only partially ejected, the barcode scanner on the robot can still scan the tape barcodes, so that system administrators can perform periodic audits of the tape system to ensure tapes are still present. The tapes are inaccessible until an operator, who must have physical access to the tape library, re-inserts the magazine. Tape systems can be stored in secure data centers that require badged access.
AES-256 Bit Encryption and Simple, Flexible Key Management Options
Hardware-based AES-256 bit encryption so data is encrypted on tape using a strong algorithm and with no performance impact. Multiple options for encryption key management, including the Scalar Key Manager, or supports various third-party key management solutions, such as backup applications or KMIP-compliant industry options.
Control System Access and Data Security
Scalar Media Security Alerts notify the administrator when media is removed – either expectedly or unexpectedly – from the library.
Multi-Factor Authentication can be enabled for administrator and user logins, providing additional security for access control.
Key Features
- Active Vault
- Logical Tape Blocking
- Ransom Block
- Additional Security Features