Overview

CryptoMove is a new active defense data protection startup in Silicon Valley. CryptoMove’s innovative approach protects data with dynamic movement, distribution, mutation, and re-encryption.

Today’s cloud infrastructure is static and unchanging, making it easy for adversaries to hide in a system, study it, and plan attacks at their leisure. Attackers have an asymmetric advantage and steal clear text, ciphertext, encryption keys, mount cryptographic attacks, destroy data, ransomware data, or corrupt data’s integrity. As data is increasingly stored in third-party cloud environments, trust and control becomes harder. Cloud providers, moreover, aggregate data from many customers, increasing their threat surface.

Traditional security methods rely on prevention and detection–digital equivalents of locks, cameras, traps, walls, and security guards. This fails. Attackers break locks, turn invisible to evade cameras, discover traps, go over and under walls, and there are simply not enough security guards to keep up. To make matters worse, quantum computers threaten to unravel all current encryption in a Y2K-style event.

CryptoMove’s innovative active defense approach makes cloud data a constantly shifting and moving target, even across multiple clouds. Attackers cannot identify data of interest to mount attacks. Time is a disadvantage, because data is constantly moving, fragmenting, and mutating. And if attackers manage to identify, steal, or destroy any data, all they have are worthless encrypted fragments. CryptoMove’s system distributes copies automatically for resiliency and redundancy, and is resilient to attack and failure. Quantum computers don’t matter, because attackers can’t collect encrypted data to brute force.

CryptoMove integrates in any cloud or multiple clouds, allowing applications to leverage multiple environments securely. This unlocks cloud adoption and prevents lock-in into any single cloud. Conventional detection or prevention increases defenders’ work and heightens cyber-adversaries’ asymmetric advantage. And in the cloud, conventional security relies on trust — which is anathema to modern security principles.