SafeNet secures SOA
- By Rutrell Yasin
- Feb 03, 2009
SafeNet has released a hardware appliance that uses encryption to secure service-oriented architecture (SOA)-based infrastructures.
The SafeNet Luna XML hardware security module is designed to provide cryptographic services for SOA without adding complexity, said Derek Tumulak, SafeNet’s vice president of product management.
SOA can help organizations run more efficiently through the reuse of legacy applications and databases. These systems then provide common Web services for users and applications throughout an organization. However, the openness and integration advantages of SOA also create vulnerabilities to sensitive data in legacy systems that were not designed to be accessed by Web services.
Encryption secures Web services. but is often complex to implement and can hurt performance if not done properly. This challenge is magnified by the lack of crypto-security expertise among SOA project managers and developers.
As a result, SafeNet’s Luna XML is easy to integrate because it provides an XML programming interface that does not require information technology administrators to know cryptographic APIs such as Public Key Cryptography Standard #11, Java Cryptography Architecture/Java Cryptography Extensions and Microsoft CryptoAPI.
Many hardware security modules rely on client software being installed on each host application server, but Luna XML is a clientless HSM. This simplifies integration, Tumulak said.
Luna XML is FIPS 140-2 Level 3 validated and equipped with multi-level access, which means it meets the highest security requirements for deployment in government agencies. Integrated physical security measures include tamper-evident seals, intrusion detection switches, and shielded connectors designed to resist physical attacks on the appliance.
Luna XML is a key component of SafeNet’s Enterprise Data Protection solution for regulatory compliance, data privacy, and information risk management.
The pricing for Luna XML starts at $24,000.
Rutrell Yasin is is a freelance technology writer for GCN.