--- title: Tips from VMworld that Storage Drive Users Need to be Aware of | ARIA description: Discover the importance of Security-in-Depth for storage drive users. Learn why proper encryption and multi-level security are crucial. Contact now! image: https://blog.ariacybersecurity.com/hubfs/Blog%20Images/encryption02-580x358.jpeg --- [![ARIA Cybersecurity](https://www.ariacybersecurity.com/wp-content/themes/cspi/library/images/Aria_Logos_2025_RGB_Primary%20Horizontal-1.png)](https://www.ariacybersecurity.com/) Toggle navigation Search - [About Us](https://www.ariacybersecurity.com/about-us/) - [Events](https://www.ariacybersecurity.com/about-us/events/) - [Careers](https://www.ariacybersecurity.com/about-us/careers/) - [ISO 9001:2015 Certification](https://www.ariacybersecurity.com/about-us/iso-90012015-certification/) - [Industry Awards and Recognition](https://www.ariacybersecurity.com/about-us/industry-awards-and-recognition/) - [Location](https://www.ariacybersecurity.com/about-us/locations/) - [Support](https://www.ariacybersecurity.com/support/) - Contact Us - [1-800-325-3110](tel:8003253110) - [REQUEST A DEMO](https://info.ariacybersecurity.com/azt-demo) - Cybersecurity Products - [ARIA AZT PROTECT](https://www.ariacybersecurity.com/aria-azt-protect/) - [ARIA ADR](https://www.ariacybersecurity.com/cybersecurity-products/aria-sds-advanced-detection-and-response/) - [Cybersecurity Partners](https://www.ariacybersecurity.com/cybersecurity-products/cybersecurity-partners/) - MSSP & OEM Solutions - [MSSP Solutions](https://www.ariacybersecurity.com/mssp-solutions/) - [OEM Solutions](https://www.ariacybersecurity.com/oem-solutions/) - [Blog](https://blog.ariacybersecurity.com/blog) - [News](https://www.ariacybersecurity.com/about-us/news/) - [Resources](https://www.ariacybersecurity.com/about-us/resources/) read September 13, 2018 # VMworld 2018 Highlights Storage Drives Lack Cyber Security ![](https://blog.ariacybersecurity.com/hubfs/Blog%20Images/encryption02-580x358.jpeg) *Given the market success and flexibility of the vSAN and NSX solutions, VMware enables partners to provide additional capabilities – like security. One key observation from the recent VMworld 2018 conference, is that Security-in-Depth needs to become the de facto approach for security. Continue reading this article to learn more about the Security-in-Depth model and why it is becoming the best practice.* VMworld 2018 started off with a lot of fanfare. VMware CEO Pat Gelsinger kicked the conference off with some mind-boggling statistics: With more than 7,500 customers, VMware NSX has achieved a substantial market leadership position in the software-defined network category – ten times larger than its closest customer. Additionally, VMware’s vSAN software, which is a licensable option to the vSphere Hypervisor, has been deployed more than 1,700 times and is currently adding more than 100 new customers per quarter. vSAN is dominating the Global Hyper-Converged Infrastructure (HCI) market due to its ease of deployment. This level of market dominance results in higher customer expectations, especially in their perception that vendors have more responsibility when it comes to security. To meet these expectations, it is critical that customers have the ability to easily and properly secure the data handled by these types of solutions. Fortunately, [VMware](https://www.vmware.com/) allows partners to develop products that can be integrated and provide the required capabilities, including security. Given the flexible nature of these [software-defined solutions](https://www.ariacybersecurity.com/cybersecurity-products/aria-sds-solution/), there are higher cyber-security risks, which means there is much to do to help secure the data handled by Software-Defined Networks and Hyper Converged Infrastructure. #### **Security-in-Depth Model** Security-in-Depth is a concept that requires multiple levels of security to be applied, depending on the need to secure applications and data. These are embraced as best practices. Implementing Security-in-Depth techniques is the proper and best approach when it comes to complete security since it can provide the ability to protect one form of application or data differently from another. For example, Security-in-Depth would manage access to applications that create marketing content much differently than the way it would with applications that facilitate financial transactions. It also would allow the data these applications access to be separately encrypted, often at multiple levels.  If done properly, the server holding human resources records may have one level of access and encryption – and add additional access and encryption protection to each employee’s PII and PHI data files. As discussed above, Security-in-Depth requires adding different levels of secure access to certain applications or VMs, as well as protecting the data with different forms of encryption. This means that we need to apply a unique encryption key to protect one form of data and a second to protect another, and so on. Depending upon the organizational environment, there are likely many servers and storage devices housing a great number of applications and data in many locations. Thus, performing Security-in-Depth can require the generation of thousands of keys in a very short period of time – possibly seconds. #### **Storage drives are particularly vulnerable** To an end user, the notion of Security-in-Depth is not only a logical approach but an expected one considering the criticality of their PII/PHI data. So what's the concern? Walking around the exhibit floor of [VMworld](https://www.vmworld.com/en/index.html), we noticed that the vast majority of storage vendors, as well as vendors performing backup data protection, had no such concepts built into their products or offerings. In fact, they were (alarmingly) confusing physical security with cyber-security. How so? Their definition of security was to encrypt all drives, system-wide, with one key. This approach would protect against the scenario where disks are stolen and installed into a similar machine. However, this does nothing to stop a cyber-criminal or insider from gaining access to running systems within an organization. Once inside the network, the bad actor would have access to all drives. The massive data breaches we keep experiencing can be stopped by proper Security-in-Depth. And now we can see why this is not typically happening. We in the industry are quick to point out that the organizations that lose our data should do a better job of protecting our information. Sounds reasonable, but if the products used don’t provide the ability to do this, it is as much the vendor’s fault as the companies that buy these products. Fortunately, the VMware product teams understand this issue and are willing to work with companies like [CSPi](https://www.ariacybersecurity.com/) and other vendors who offer simple to deploy Security-in-Depth solutions to protect their customers’ applications and critical data. For more information about CSPi and our [security solutions](https://www.ariacybersecurity.com/cybersecurity-products/solutions/), please [visit our security solutions web page](https://www.ariacybersecurity.com/ethernet-products/) now or contact us below.     Tags: [data breach](https://blog.ariacybersecurity.com/blog/tag/data-breach), [cybersecurity](https://blog.ariacybersecurity.com/blog/tag/cybersecurity), [data protection](https://blog.ariacybersecurity.com/blog/tag/data-protection) ### Related Articles ## [Securing the Tap: Defending Water OT with AZT PROTECT and Perimeter Defenses](https://blog.ariacybersecurity.com/blog/defending-water-ot-with-azt-protect) *( read )* Topics: [data breach](https://blog.ariacybersecurity.com/blog/tag/data-breach), [cybersecurity](https://blog.ariacybersecurity.com/blog/tag/cybersecurity), [data protection](https://blog.ariacybersecurity.com/blog/tag/data-protection) ## [HOW AZT BREAKS THE HUGGING FACE ATTACK CHAIN](https://blog.ariacybersecurity.com/blog/how-azt-breaks-the-hugging-face-attack-chain) *( read )* Topics: [data breach](https://blog.ariacybersecurity.com/blog/tag/data-breach), [cybersecurity](https://blog.ariacybersecurity.com/blog/tag/cybersecurity), [data protection](https://blog.ariacybersecurity.com/blog/tag/data-protection) ## [Five 2025 New Year’s Resolutions for OT Cybersecurity Leaders](https://blog.ariacybersecurity.com/blog/five-2025-new-years-resolutions-for-ot-cybersecurity-leaders-aria-cybersecurity) *( read )* Topics: [data breach](https://blog.ariacybersecurity.com/blog/tag/data-breach), [cybersecurity](https://blog.ariacybersecurity.com/blog/tag/cybersecurity), [data protection](https://blog.ariacybersecurity.com/blog/tag/data-protection) - [Cybersecurity Products](https://www.ariacybersecurity.com/cybersecurity-products/) - [All Cybersecurity Products](https://www.ariacybersecurity.com/cybersecurity-products/all-products/) - [ARIA SDS Applications](https://www.ariacybersecurity.com/cybersecurity-products/aria-sds-security-services/) - [ARIA SDS AIR](https://www.ariacybersecurity.com/cybersecurity-products/aria-air/) - [ARIA Security Appliances](https://www.ariacybersecurity.com/cybersecurity-products/security-appliances/) - Solutions - [Threat Detection and Response](https://www.ariacybersecurity.com/cybersecurity-products/threat-detection-response/) - [Data Protection](https://www.ariacybersecurity.com/cybersecurity-products/data-protection/) - [Industry Compliance](https://www.ariacybersecurity.com/cybersecurity-products/industry-compliance/) - [Protecting Commercial IoT](https://www.ariacybersecurity.com/cybersecurity-products/protecting-commercial-iot/) - [Myricom SmartNICs](https://www.ariacybersecurity.com/network-adapters/) - [Software](https://www.ariacybersecurity.com/network-adapters/software/) - [Myricom DBL](https://www.ariacybersecurity.com/network-adapters/software/dbl/) - [MVA](https://www.ariacybersecurity.com/network-adapters/mva-software/) - [Myricom Sniffer 10G](https://www.ariacybersecurity.com/network-adapters/software/sniffer10g/) - Myricom ARC - [C-Class](https://www.ariacybersecurity.com/network-adapters/c-class/) - [D-Class](https://www.ariacybersecurity.com/network-adapters/d-class/) - [E-Class](https://www.ariacybersecurity.com/network-adapters/e-class/) - [Myricom SIA SmartNIC](https://www.ariacybersecurity.com/network-adapters/myricom-sia/) - [Resellers & Distributors](https://www.ariacybersecurity.com/network-adapters/resellers-distributors/) - MSSP and OEM Solutions - [MSSP Solutions](https://www.ariacybersecurity.com/mssp-solutions/) - [OEM Solutions](https://www.ariacybersecurity.com/oem-solutions/) - [About Us](https://www.ariacybersecurity.com/about-us/) - [Careers](https://www.ariacybersecurity.com/about-us/careers/) - [Awards](https://www.ariacybersecurity.com/about-us/industry-awards-and-recognition/) - [News](https://www.ariacybersecurity.com/about-us/news/) - [Resources](https://www.ariacybersecurity.com/about-us/resources/) - [Blog](https://blog.ariacybersecurity.com/blog) - [Support](https://www.ariacybersecurity.com/support/) - [Contact Us](https://www.ariacybersecurity.com/about-us/contact-us/) - [Careers](https://www.ariacybersecurity.com/about-us/careers/) - [Privacy Policy](https://www.ariacybersecurity.com/privacy-policy/) - [Cybersecurity Terms and Conditions](https://www.ariacybersecurity.com/cybersecurity-terms-and-conditions/) - [ADR and SAAS SOLUTIONS TERMS AND CONDITIONS](https://www.ariacybersecurity.com/aria-cybersecurity-terms-and-conditions-aria-adr-and-saas-solutions/) - ## Social Links [![Support](https://www.ariacybersecurity.com/wp-content/uploads/2019/05/careers-icon.png)](https://blog.ariacybersecurity.com/about-us/careers) [![Support](https://www.ariacybersecurity.com/wp-content/uploads/2019/05/support-icon.png)](https://blog.ariacybersecurity.com/support) - ## Subscribe Enter your email address to subscribe to this blog and receive notifications of new posts by email. - ## RSS Feed [RSS Feed](https://www.ariacybersecurity.com/blog/feed/) © Copyright 2026 CSP Inc. All rights reserved. ARIA Cybersecurity Solutions, are brought to market by the High Performance Products Division of CSP Inc. Myricom network products are manufactured, sold, and serviced by the HPP division of CSP Inc. ![ARIA GDPR Compliant](https://blog.ariacybersecurity.com/wp-content/uploads/2024/02/ARIA_GDPR_Compliant_IMG.png) ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "ARIA Cybersecurity Solutions", "url" : "https://blog.ariacybersecurity.com/blog/author/aria-cybersecurity-solutions" }, "dateModified" : "2025-02-03T21:15:33.617Z", "datePublished" : "2018-09-13T17:36:55.000Z", "headline" : "Tips from VMworld that Storage Drive Users Need to be Aware of | ARIA", "image" : [ "https://blog.ariacybersecurity.com/hubfs/Blog%20Images/encryption02-580x358.jpeg" ], "mainEntityOfPage" : { "@id" : "https://blog.ariacybersecurity.com/blog/vmworld-2018-highlights-security-in-depth-blog", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://blog.ariacybersecurity.com/hubfs/Aria_Logos_2025_RGB_Primary%20Horizontal.png" }, "name" : "ARIA Cybersecurity Solutions" } } ```