Box Touts New Security, Administration Features - InformationWeek
Cloud // Software as a Service
12:15 PM
Connect Directly
How Upwork Cut Zero-Day File Attacks by 70%
Oct 05, 2017
Upwork has millions of clients and freelancers that have to upload and download many files to and ...Read More>>

Box Touts New Security, Administration Features

Cloud file-sharing service integrates with data-loss prevention, external reporting tools, adds native 2-step authentication.

6 Ways iPhone 5, iOS 6 Amp Up Social Opportunities
6 Ways iPhone 5, iOS 6 Amp Up Social Opportunities
(click image for larger view and for slideshow)
Enterprises venturing warily into cloud file-sharing and storage will be able to take a "trust, but verify" approach using new features of the Box service introduced Tuesday.

Through upgrades to its own service and integration with Proofpoint for data-loss prevention and GoodData for reporting, Box is providing more ways for its customers to secure and monitor employee accounts on the service.

"We've always focused on security as a baseline for all our business customers," said Whitney Bouck, general manager of enterprise at Box. "But there are still a lot of unknowns in the market about cloud and what it means to put data in the cloud. We're on a constant mission to educate the market on the safety of the Box cloud and prove that we'll treat their information at least as securely as they could in their own data center."

[ Read about Box's new global file transfer acceleration feature. See Box Launches Accelerator Service To Boost Upload Speeds. ]

Box made a similar announcement in May, which included the beta release of a cross-account search tool for administrators who need to track access to specific files or produce reports for e-discovery in the case of litigation. That tool has been further refined and released to production. In addition, Box is introducing a reporting API for integration with external tools that can be used to monitor activity and spot suspicious patterns. GoodData is the first partner Box has announced that is taking advantage of the API.

The GoodData integration will also allow enterprises to do reporting and monitoring across systems, where Box activity might be only one input to the report, Bouck said.

Organizations with concerns about theft of intellectual property or rules against storing personal information about customers in the cloud will also be able to take advantage of the integration with ProofPoint, which can automatically scan the repository for documents that violate compliance policy. The ProofPoint integration will be available in early 2013.

In addition, Box is adding a native 2-step authentication mechanism. Users who register a mobile phone number receive a sign-on code, which they must enter in addition to their password. Box previously supported multi-factor authentication through leading single sign-on partners like Ping, Okta, Intel, OneLogin, and VMWare, but Bouck said Box decided it also needed to offer it independently. "We're making sure security is just something you know is there and will be honored," she said.

Follow David F. Carr on Twitter @davidfcarr. The BrainYard is @thebyard and

Social media make the customer more powerful than ever. Here's how to listen and react. Also in the new, all-digital The Customer Really Comes First issue of The BrainYard: The right tools can help smooth over the rough edges in your social business architecture. (Free registration required.)

Comment  | 
Print  | 
More Insights
Newest First  |  Oldest First  |  Threaded View
Deb Donston-Miller
Deb Donston-Miller,
User Rank: Apprentice
10/4/2012 | 1:13:51 AM
re: Box Touts New Security, Administration Features
This all makes sense for companies that decide on an "official" basis to implement Box, but I wonder what happens when a department or workgroup or single employee set up Box for storing and sharing corporate documents. What are the implications when you talk about, say, transfer of credentials when an employee leaves?

Deb Donston-Miller
Contributing Editor, The BrainYard
How Enterprises Are Attacking the IT Security Enterprise
How Enterprises Are Attacking the IT Security Enterprise
To learn more about what organizations are doing to tackle attacks and threats we surveyed a group of 300 IT and infosec professionals to find out what their biggest IT security challenges are and what they're doing to defend against today's threats. Download the report to see what they're saying.
Register for InformationWeek Newsletters
White Papers
Current Issue
2017 State of IT Report
In today's technology-driven world, "innovation" has become a basic expectation. IT leaders are tasked with making technical magic, improving customer experience, and boosting the bottom line -- yet often without any increase to the IT budget. How are organizations striking the balance between new initiatives and cost control? Download our report to learn about the biggest challenges and how savvy IT executives are overcoming them.
Twitter Feed
Sponsored Live Streaming Video
Everything You've Been Told About Mobility Is Wrong
Attend this video symposium with Sean Wisdom, Global Director of Mobility Solutions, and learn about how you can harness powerful new products to mobilize your business potential.
Flash Poll