Cloud // Software as a Service
News
10/2/2012
12:15 PM
Connect Directly
LinkedIn
Google+
Twitter
RSS
E-Mail
50%
50%
Repost This

Box Touts New Security, Administration Features

Cloud file-sharing service integrates with data-loss prevention, external reporting tools, adds native 2-step authentication.

6 Ways iPhone 5, iOS 6 Amp Up Social Opportunities
6 Ways iPhone 5, iOS 6 Amp Up Social Opportunities
(click image for larger view and for slideshow)
Enterprises venturing warily into cloud file-sharing and storage will be able to take a "trust, but verify" approach using new features of the Box service introduced Tuesday.

Through upgrades to its own service and integration with Proofpoint for data-loss prevention and GoodData for reporting, Box is providing more ways for its customers to secure and monitor employee accounts on the service.

"We've always focused on security as a baseline for all our business customers," said Whitney Bouck, general manager of enterprise at Box. "But there are still a lot of unknowns in the market about cloud and what it means to put data in the cloud. We're on a constant mission to educate the market on the safety of the Box cloud and prove that we'll treat their information at least as securely as they could in their own data center."

[ Read about Box's new global file transfer acceleration feature. See Box Launches Accelerator Service To Boost Upload Speeds. ]

Box made a similar announcement in May, which included the beta release of a cross-account search tool for administrators who need to track access to specific files or produce reports for e-discovery in the case of litigation. That tool has been further refined and released to production. In addition, Box is introducing a reporting API for integration with external tools that can be used to monitor activity and spot suspicious patterns. GoodData is the first partner Box has announced that is taking advantage of the API.

The GoodData integration will also allow enterprises to do reporting and monitoring across systems, where Box activity might be only one input to the report, Bouck said.

Organizations with concerns about theft of intellectual property or rules against storing personal information about customers in the cloud will also be able to take advantage of the integration with ProofPoint, which can automatically scan the repository for documents that violate compliance policy. The ProofPoint integration will be available in early 2013.

In addition, Box is adding a native 2-step authentication mechanism. Users who register a mobile phone number receive a sign-on code, which they must enter in addition to their password. Box previously supported multi-factor authentication through leading single sign-on partners like Ping, Okta, Intel, OneLogin, and VMWare, but Bouck said Box decided it also needed to offer it independently. "We're making sure security is just something you know is there and will be honored," she said.

Follow David F. Carr on Twitter @davidfcarr. The BrainYard is @thebyard and facebook.com/thebyard

Social media make the customer more powerful than ever. Here's how to listen and react. Also in the new, all-digital The Customer Really Comes First issue of The BrainYard: The right tools can help smooth over the rough edges in your social business architecture. (Free registration required.)

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
Deb Donston-Miller
50%
50%
Deb Donston-Miller,
User Rank: Apprentice
10/4/2012 | 1:13:51 AM
re: Box Touts New Security, Administration Features
This all makes sense for companies that decide on an "official" basis to implement Box, but I wonder what happens when a department or workgroup or single employee set up Box for storing and sharing corporate documents. What are the implications when you talk about, say, transfer of credentials when an employee leaves?

Deb Donston-Miller
Contributing Editor, The BrainYard
The next wave in APM
The next wave in APM
Find out how to get the benefits of application monitoring while avoiding the complexity and performance headaches.
Register for InformationWeek Newsletters
White Papers
Current Issue
InformationWeek Elite 100 - 2014
Our InformationWeek Elite 100 issue -- our 26th ranking of technology innovators -- shines a spotlight on businesses that are succeeding because of their digital strategies. We take a close at look at the top five companies in this year's ranking and the eight winners of our Business Innovation awards, and offer 20 great ideas that you can use in your company. We also provide a ranked list of our Elite 100 innovators.
Video
Slideshows
Twitter Feed
Audio Interviews
Archived Audio Interviews
GE is a leader in combining connected devices and advanced analytics in pursuit of practical goals like less downtime, lower operating costs, and higher throughput. At GIO Power & Water, CIO Jim Fowler is part of the team exploring how to apply these techniques to some of the world's essential infrastructure, from power plants to water treatment systems. Join us, and bring your questions, as we talk about what's ahead.