![\"\"](\"https:\/\/icrowdnewswire.com\/wp-content\/uploads\/2020\/06\/3998-ICN.png\")
<\/p>\n<\/p>\n
Confidential computing encrypts data in use as it’s being processed and keeps that data encrypted in memory and elsewhere outside the CPU.<\/p>\n
![\"Google](\"https:\/\/tr3.cbsistatic.com\/hub\/i\/r\/2020\/07\/14\/59d05747-a157-416e-96e2-fb1eb71b4bcb\/resize\/770x\/919795cb3e54866f6904aff2c4ef16ea\/google-cloud.jpg\")
<\/span><\/a><\/p>\n<\/div>\n
Google Cloud just launched a new technology that encrypts data while it’s being processed: Confidential computing, which also keeps data encrypted in memory, as well as outside the central processing unit (CPU). Google Cloud<\/a> users can now control the confidentiality of their data. <\/p>\n This marks the next step up from Google Cloud’s existing data encryption while at-rest and in-transit. Google Cloud employed several isolation and sandboxing techniques to maintain the security of multi-tenant architecture. <\/p>\n The beta version of confidential virtual machines (VMs) is the initial product in Google Cloud’s confidential computing portfolio, and, the company assures, is the “first major cloud provider” with a significant level of security and isolation. Confidential VMs allow users to further isolate workloads in the cloud through memory encryption. <\/p>\n Designed to be easy to deploy and use, the confidential computing environments began with the open-source framework, Asylo, which also delivers high performance and works for any size workloads that are run in the cloud. <\/p>\n New to confidential VMs are uncomplicated options and “life and shift” applications. In a recent release, Google Cloud described its approach:<\/p>\n Breakthrough confidentiality: <\/strong>Even while processing, customers can protect the confidentiality of sensitive data. Data remains encrypted while in use, indexed, queried, or trained on. Generated in hardware, and per VM, encryption keys are not exportable. The Secure Encrypted Virtualization (SEV) feature of the second generation AMD (Advanced Micro Devices) EPYCTM (brand of AMD x86-64 microprocessors) CPUs are leveraged by confidential VMs. <\/p>\n Enhanced innovation:<\/strong> Businesses can share confidential data sets, as well as collaborate in the cloud and still maintain confidentiality. <\/p>\n Confidentiality for lift-and-shift workloads:<\/strong> All Google Cloud Platform workloads that run in VMs will also be able to run as a confidential VM.<\/p>\n Protection against advanced threats: <\/strong>The integrity of a customer’s operating system is ensured as it uses the protections shielded VMs offer against rootkit and bootkits.<\/p>\n Confidential VMs offer hardware-based inline memory encryption with a dedicated per-VM instance key, managed and generated by the AMD EPYC processors. The confidential VMs’ OS image is hardened and the integrity of firmware, kernel binaries, and drivers are verified through Shielded VMs. <\/p>\n The AMD Cloud Solution engineering team ensures the VMs’ memory encryption will not interfere with workload performance. To handle storage and network traffic with higher throughput than previous protocols, Google Cloud added support for new OSS drivers (NVMe and gVNIC); these additions confirm performance metrics of Confidential VMs, in line with non-confidential VMs.<\/p>\n “With built-in secure encrypted virtualization, 2 Gen AMD EPYC processors provide an innovative hardware-based security feature that helps secure data in a virtualized environment,” said Raghu Nambiar, corporate vice president, data center ecosystem, AMD, in a press release. <\/p>\n In addition to the maintenance of privacy, organizations can collaborate without compromising the confidentiality of data sets, potentially resulting in new transformational technologies and ideas<\/p>\n<\/div>\n Tags:<\/b> Mendoza<\/p>\n<\/p><\/div>\n","protected":false},"excerpt":{"rendered":"The debut of the beta version<\/h2>\n
\n\n\n <\/div>\n<\/section>\n<\/div>\n<\/div>\n<\/div>\nThe Google Cloud approach<\/h2>\n
Confidential VMs’ backstory<\/h2>\n
See Campaign: <\/strong>https:\/\/www.techrepublic.com\/article\/smb-study-finds-google-cloud-increases-productivity-and-lowers-it-costs\/<\/a>
Contact Information:<\/b>
Mendoza<\/p>\n
<\/a>, Wire<\/a>, United States<\/a>, English<\/a><\/p>\n\nContact Information:<\/h3>\n
Confidential computing encrypts data in use as it’s being processed and keeps that data encrypted in memory and elsewhere outside the CPU. Image: Dongyu Xu \/ Getty Images Google Cloud just launched a new technology that encrypts data while it’s being processed: Confidential computing, which also keeps data encrypted in memory, as well as … Continue reading New Google Cloud tech gives users control of data confidentiality<\/span><\/a> Continue Reading