4 ms·

The magic homomorphic system doesn't exist, and I don't see any reason to believe it will exist on a time frame I care about. Short of that we can either deploy

The magic homomorphic system doesn't exist, and I don't see any reason to believe it will exist on a time frame I care about. Short of that we can either deploy our own infrastructure (capital) or lease it from someone else (opex/"cloud"). The cost/benefit there is a business decision, and I see no reason to believe the latter option is truly "a single company."

wallflower 12y ago
tldr: AWS meets the security, privacy, and regulatory demands of the financial services industry. There was an AWS:reInvent 2014 presentation about NASDAQ OMX. OMX is the holding company of NASDAQ that develops and grows the technology that runs stock exchanges in many countries. OMX is using Redshift to build a cloud solution (FinQloud - Regulatory Records Retention) for their 20+ exchange customers (worldwide stock exchanges). To protect their data, they use HSMs (actually, a cluster of HSMs) to encrypt the data. NASDAQ OMX has a direct, leased connection to the AWS Data Centers. The data is stored on s3 in encrypted form and only decrypted at the time of Redshift building the reports by getting the decryption key from the HSM (over the leased connection). They have multiple alarms and monitoring around Redshift access in their offshore ops center (e.g. the postgres audit table). True data privacy and protection is near impossible but Amazon makes it easier to achieve high-levels of data privacy and security. http://www.slideshare.net/AmazonWebServices/bdt206-see-how-amazon-redshift-is-powering-business-intelligence-in-the-enterprise-aws-reinvent-2014 http://www.slideshare.net/AmazonWebServices/bdt206-see-how-a... http://aws.amazon.com/solutions/case-studies/nasdaq-finqloud/ http://aws.amazon.com/solutions/case-studies/nasdaq-finqloud...
- dragontamer 12y ago
  The idea of encryption is that you can store it anywhere and it'd be secure. If you can find an example of NASDAQ OMX using EC2 machines to host the data, maybe I'll believe you. But for now, your post is pretty bland hyperbole. I'm sure the cloud is secure enough for a lot of businesses. But I think the links you have are reeking of "marketing", as opposed to a practical example.
  - dlgeek 12y ago
    They're doing the processing in RedShift, which is a hosted Amazon service, running on Amazon hardware.

wallflower 12y ago

tldr: AWS meets the security, privacy, and regulatory demands of the financial services industry. There was an AWS:reInvent 2014 presentation about NASDAQ OMX. OMX is the holding company of NASDAQ that develops and grows the technology that runs stock exchanges in many countries. OMX is using Redshift to build a cloud solution (FinQloud - Regulatory Records Retention) for their 20+ exchange customers (worldwide stock exchanges). To protect their data, they use HSMs (actually, a cluster of HSMs) to encrypt the data. NASDAQ OMX has a direct, leased connection to the AWS Data Centers. The data is stored on s3 in encrypted form and only decrypted at the time of Redshift building the reports by getting the decryption key from the HSM (over the leased connection). They have multiple alarms and monitoring around Redshift access in their offshore ops center (e.g. the postgres audit table). True data privacy and protection is near impossible but Amazon makes it easier to achieve high-levels of data privacy and security. http://www.slideshare.net/AmazonWebServices/bdt206-see-how-amazon-redshift-is-powering-business-intelligence-in-the-enterprise-aws-reinvent-2014 http://www.slideshare.net/AmazonWebServices/bdt206-see-how-a... http://aws.amazon.com/solutions/case-studies/nasdaq-finqloud/ http://aws.amazon.com/solutions/case-studies/nasdaq-finqloud...

dragontamer 12y ago
The idea of encryption is that you can store it anywhere and it'd be secure. If you can find an example of NASDAQ OMX using EC2 machines to host the data, maybe I'll believe you. But for now, your post is pretty bland hyperbole. I'm sure the cloud is secure enough for a lot of businesses. But I think the links you have are reeking of "marketing", as opposed to a practical example.
- dlgeek 12y ago
  They're doing the processing in RedShift, which is a hosted Amazon service, running on Amazon hardware.