Data-in-transit security
February 10 2023

Data-in-Transit and Network Security via Obfuscation

Introduction: Sensitive Data and Communication Lines are Vulnerable

Enterprises with valuable data or intellectual property can become targets for eavesdropping or data theft. The monitoring and control channels for critical infrastructure can be discovered and disrupted. In both cases, hackers specifically target these organizations to steal or interfere with their data-in-transit and compromise their network security.  

Yet, even for security-minded enterprises, there is no avoiding sending critical data over the Internet. This fundamentally insecure, public medium is now part of the corporate network, connecting businesses internally and with their vendors, partners and remote workers. Attackers will always seek the weakest point in corporate security, and internet data transfer and network perimeter are easy targets. 

Current solutions, such as TLS encryption, VPNs and SASE, do not provide sufficient protection for data, systems and users. The following vulnerabilities remain:

  • Eavesdropping and data theft 
  • Malicious network monitoring, traffic analysis 
  • Endpoint security for personnel and network asset protection

Several business pain points result, including:

  • Expensive mitigation of data breaches, along with negative brand impacts
  • Leakage of sensitive intellectual property and loss of competitive advantage
  • Interference from adversarial foreign governments in private business affairs
  • Personal privacy risk to high value corporate targets, such as VIP executives 

Solution: Data-in-Transit & Network Security for Critical Connections

SecureCo technology creates a software-defined tunnel that provides end-to-end encryption to protect the content of the transmission. But SecureCo goes much further than these traditional methods. We use stealth and data obfuscation technologies to protect the data transfer itself from being discovered or interfered with. If adversaries do find your data-in-transit, our anonymization technology assures they cannot identify or associate it with the source and destination.  

SecureCo offers defense-in-depth for data-in-transit security. While observable encrypted traffic can be vulnerable to a number eavesdropping, man-in-the-middle, capture or disruption attacks, our solution protects against these threats by making your data a harder target. One principal example of a data-in-transit threat is data harvesting for future quantum decryption, also known as Store Now, Decrypt Later (SNDL). For hackers to successfully harvest your data transfer, they must first be able to find it and attribute it to you. SecureCo’s evasive routing and anonymization make both of those steps much harder.  

Though NIST-approved quantum safe encryption algorithms are not yet finalized, SecureCo clients benefit from our crypto-agile architecture, which can immediately adopt the most secure technologies.  In addition, our encryption methods include symmetric encryption, which is intrinsically more resistant to quantum decryption. Until quantum proof algorithms standards are ready for adoption, SecureCo’s protective techniques are the best defense against targeted data harvesting for future quantum decryption. 

Another critical aspect of SecureCo’s data obfuscation is the benefits to network security, and the end users and network assets at your network perimeter. Our patented rendezvous technology establishes connections without exposing network endpoints to discovery by malicious port scans.  This, together with anonymization technology, makes endpoints such as mobile phones and laptops less exposed. And the important end users associated with these phones and computers, which are normally highly exposed to internet threats, are significantly safer, with less risk of hackers successfully targeting their identity, location and communications.  

Risk and Cost Reduction Benefits of SecureCo Solutions:

SecureCo’s network protection solutions provide the following practical benefits:

  • Confidence to operate securely on untrusted public networks, including internationally 
  • Protect the secrecy of intellectual property, customer data and private communications
  • Reduced risk of disruption or ransom attacks, and preservation of business continuity 
  • Enhanced protection of private identities and communications of executives and VIP clients

The practical benefits above yield several positive business outcomes:

  • Lowering risk of data breaches and reputational damage
  • Retention of competitive advantages based on R&D investment and preemptive strategy
  • Protection against interference from state-sponsored threat actors 
  • Reduce risk to your organization’s most targeted personnel or network assets`

How it SecureCo Technology Works:

SecureCo designed its breakthrough data protection based on several network obfuscation and stealth technologies. Our secure data delivery platform, SecureCo Stratus, routes evasively using random ephemeral circuits for data transfer, creating a moving target defense. The changeable nature of the routing makes it difficult for adversaries to stay on target, gather reconnaissance, or stage an attack. Any compromised network devices in the data circuit are disintermediated by continuous refreshing of routing paths.

Another security feature is data obfuscation, which makes it exceedingly difficult for an adversary to target any particular company’s data. SecureCo obfuscates data in two ways: by removing attribution, and through decoy data injection. We remove attribution using the same anonymizing technology Tor uses, multilayer encryption. We also inject decoy data to eliminate patterns and signatures, through which an adversary might recognize sources or activity profiles. These two methods assure that high value data is less targetable for monitoring, interference or harvesting. 

Quantum Threat Mitigation

Though NIST-approved post quantum cryptography is not yet finalized, SecureCo clients benefit from our crypto-agile architecture, which can immediately adopt the most secure technologies. In addition, we also employ a diversity of encryption approaches, including symmetric encryption, which is intrinsically much less vulnerable to quantum decryption. Until the government establishes post quantum cryptography standards, SecureCo’s protective techniques are the best defense against targeted data harvesting for future quantum decryption. 

Network Security Benefits

Another critical aspect of SecureCo’s data obfuscation is the benefits to network security, and the end users and network assets at your network perimeter. Our patented rendezvous technology establishes connections without exposing network endpoints to discovery by malicious port scans.  This, together with anonymization technology, makes endpoints such as mobile phones and laptops less exposed. And the important end users associated with these phones and computers, which are normally highly exposed to internet threats, are significantly safer, with less risk of hackers successfully targeting their identity, location and communications.  

High Performance, Scalable and Low Overhead:

SecureCo’s networking solutions are high performance, and do not add meaningful latency to data-in-transit. We accelerate data transfer via the terabyte backplane of best-of-breed cloud providers. In some cases, data transit speeds are comparable in performance to that of the customer’s ISP unburdened by additional network security.

SecureCo provides risk mitigation that is compatible with existing systems. Installation is a simple network overlay that co-exists with or replaces other security systems, such as VPNs. Existing solutions, such as ZTNA and SASE, do not provide obfuscation benefits for data-in-transit, and SecureCo offers a complementary layer of defense-in-depth. 

Installation is simple and requires deployment on the black side of the customer’s network environment. Our managed cloud-based delivery platform requires negligible customer overhead. The service scales flexibly, drawing upon the resources of cloud services to operate at any volume in any geography.  

Reach out to us today to learn more about how SecureCo solutions can reduce your organization’s cybersecurity risk.