Additional Info

CompanyCryptoMove
Websitehttps://www.cryptomove.com
Company size (employees)1-25
Type of solutionSoftware

Overview

CryptoMove is a new active defense data protection startup in Silicon Valley. CryptoMove’s innovative security approach protects data in industrial/SCADA environments with dynamic movement, distribution, mutation, and re-encryption.

Data in industrial/SCADA environments is static and unchanging, easy for adversaries to hide, study, and plan attacks at their leisure. Attackers have asymmetric advantages and steal clear text, ciphertext, encryption keys, mount cryptographic attacks, destroy data, ransomware data, or corrupt data’s integrity.

The major SCADA/industrial security problem is traditional prevention and detection methods have no hope of scaling. These digital equivalents of locks, cameras, traps, walls, and security guards fail. Attackers break locks, turn invisible to evade cameras, discover traps, go over/under walls, and there are simply not enough guards to keep up. To make matters worse, quantum computers threaten to unravel current encryption in a Y2K-style event. SCADA/ICS attacks on data availability also risk physical destruction.

CryptoMove’s innovative approach makes data a constantly shifting and moving target. Attackers cannot identify data to mount attacks. Time is a disadvantage, because data is constantly moving, fragmenting, and mutating. And if attackers manage to identify, steal, or destroy data, all they have are worthless encrypted fragments. Quantum computers don’t matter, because attackers can’t collect encrypted data to brute force. CryptoMove’s system distributes copies automatically, which is critical for resiliency and redundancy and data availability, and is resilient to attack and failure. Availability is crucial for industrial environments.

CryptoMove integrates in any edge/fog device and provides end-to-end protection from an industrial edge/fog node to the cloud. Conventional detection/prevention increases defenders’ work and heightens adversaries’ asymmetric advantages. CryptoMove’s active defense data protection, however, increases attacker costs while reducing defenders’ workloads. This flips the asymmetry — in favor of defense.

How we are different

CryptoMove is a groundbreaking and innovative approach to encryption that leverages dynamic movement, distribution, mutation, and re-encryption. ICS/SCADA environments are incredibly difficult to secure because conventional methods of prevention and detection don’t scale. ICS/SCADA environments are highly distributed and have untrusted networks.Traditional security is vulnerable to attacks that steal cipher text, steal keys, study encryption systems, destroy encrypted data, or ransomware data, to which encryption offers zero protection. Further, an attack on data in ICS/SCADA environments risks not just stealing of secrets, but physical destruction and danger. Data availability is just as--if not more--important as confidentiality. CryptoMove's innovative approach makes data a constantly shifting and moving target. Further, CryptoMove is the best way to securely store and manage data in highly distributed ICS/SCADA environments, due to its natural resiliency and redundancy which ensures data availability and resiliency to destruction. CryptoMove integrates in edge/fog computing nodes and protects end-to-end to the cloud. CryptoMove thus uniquely increases security and resiliency, reduces defender workloads, and increases costs and frustrates cyber-adversaries.


CryptoMove is backed and advised by top investors and security industry leaders, including Tim Draper and Draper Associates venture capital firm, as well as early investors, founders, and executives from Palo Alto Networks, FireEye, Palantir, Facebook, Cyphort, Cisco, Juniper, and others.


CryptoMove has a top team that has been on the ground floor of multiple successful enterprise and security startups, has invented distributed programming languages, built next-generation military moving target defense security systems, and has enforced data protection and cybercrime for Fortune 500 technology giants.