This white paper describes the security and privacy features of the MozyEnterprise backup service as it relates to the handling of user data. To give the reader a basic understanding of security and privacy principles applied to the system, the scope of this document is confined to the architectural concept level.

The MozyEnterprise backup service security and privacy model is built on the principle of strong encryption. Mozy uses the OpenSSL implementation of the keyed, symmetric block cipher, known as Blowfish, for strong encryption. Mozy encrypts data with a 448-bit key known only by the customer and residing only at the customer location. All communication between the client and the MozyEnterprise Servers is over a certified 128-bit SSL connection.

The fundamental security questions that need to be answered are:

• What security mechanisms are employed when trying to write (back up) my data to a remote server?
• What security mechanisms are employed when trying to read (restore) my remote data?