Support Centre

You have out of 5 free articles left for the month

Signup for a trial to access unlimited content.

Start Trial

Continue reading on DataGuidance with:

Free Member

Limited Articles

Create an account to continue accessing select articles, resources, and guidance notes.

Free Trial

Unlimited Access

Start your free trial to access unlimited articles, resources, guidance notes, and workspaces.

USA: NIST requests comments on draft publication on cloud-native data protection

On June 14, 2024, the National Institute of Standards and Technology (NIST) released the initial public draft of the NIST Interagency Report (IR) 8505, titled 'A Data Protection Approach for Cloud-Native Applications' for public comment.

What is covered in the publication?

The publication discusses the need for effective data protection strategies in cloud-native network architectures, which include multi-cloud environments, service mesh networks, and hybrid infrastructures. The publication outlines techniques designed to protect sensitive data across different domains and application scenarios, including dynamic data masking, user and entity behavior analytics, and data loss prevention. Additionally, the publication offers strategies to enhance the security of data in transit, to reduce the risk of breaches and unauthorized access.

The publication also explores the use of WebAssembly (WASM) to ensure robust data protection as sensitive data travels through various communication paths. A comprehensive security analysis is also provided in the publication, detailing how WASM modules can meet security goals and feature sets, including memory safety, control flow integrity, and protection against side-channel and injection attacks. According to the publication, leveraging WASM enables organizations to improve the efficiency of data categorization and protection processes, ensuring minimal latency and high performance. 

How can public comments be submitted?

Public comments on the draft can be submitted via email to [email protected] or by mail to its physical address, until August 1, 2024.

You can read the press release here and the publication here.