December 5th, 2008 at 02:09pm
Under General
I’ve mentioned Nauman/recluze before, so it was nice to see an update on his blog regarding Trusted Computing, Mobiles and the Project.
He’s working on a not-confidential-but-cannot-be-mentioned project which he hints at with this tantalising information:
We’ve started working on our Dynamic Behavioral Attestation for Mobile Platforms project. We’ve had some tutorial sessions and we’re getting some [...]
Continue Reading recluze on trusted computing
Tags: android, jsr321, recluze
By Ken Y-N
December 3rd, 2008 at 12:29pm
Under Advocacy+ TNC
In reply to Chris Hoff’s recent post, covered on this blog here, Steve Hanna of Juniper talked about The Adoption Curve for IF-MAP, the Trusted Computing Group’s standard protocol for connected security.
He talks about how adoption follows classic adoption cycles: first the innovators get going, followed by early adopters, early majority, late majority, and laggards, [...]
Continue Reading Be an IF-MAP innovator!
Tags: if-map, steve hanna
By Ken Y-N
December 2nd, 2008 at 10:09am
Under Advocacy+ TNC
Mike Fratto had an interesting post on the InformationWeek blog recently, where he described how it’s all very well for companies to have ticked the box in the feature set that says “Supports TNC” (that’s Trusted Network Connect from the Trusted Computing Group), but apparently some of these people are not actually shipping the code, [...]
Continue Reading TNC support: all mouth, no trousers?
Tags: informationweek, mike fratto
By Ken Y-N
December 1st, 2008 at 01:34pm
Under General
Wow, I’m seriously impressed, having attended a few lectures on what exactly all the various EALs (Evaluation Assurance Levels) mean, to see that Green Hills Sofware have announced that their operating system Integrity-178B has been rated by a National Security Agency-run certification process as EAL6+. To market this, the highest-rated OS in the world, they [...]
Continue Reading Integrity-178B is now EAL6+
Tags: darkreading, eal, integrity
By Ken Y-N
November 29th, 2008 at 12:10pm
Under Advocacy+ Storage
Jon Oltsik of CNet recently published what amounts to a call to action to security professionals to start requesting the purchase of hard drives supporting disk-level encryption. At the moment Fujitsu, Hitachi and Seagate offer such drives, with the usual features of 256-bit encryption, half a terabyte of storage, and up to 16 megabytes of [...]
Continue Reading Buy TCG-based storage today
Tags: fujitsu, hitatchi, jon oltsik, seagate
By Ken Y-N
November 28th, 2008 at 02:24pm
Under Uncategorized
From the official Trusted Computing Group (TCG) blog comes a post by Claire Vishik of Intel entitled TPM 1.2 specifications moves forward to become ISO/IEC standards.
In 2007 the Trusted Platform Module (TPM) v1.2 specification was submitted to JTC1 (ISO/IEC Joint Committee 1), and in July 2008 the member countries voted to approve it as an [...]
Continue Reading TPM 1.2 becomes ISO/IEC 11889, Parts 1-4
Tags: claire vishik, iso/iec 11889
By Ken Y-N
November 28th, 2008 at 11:06am
Under Advocacy+ Storage
There was a recent rather interesting and detailed post on Computer Technology Review from Michael Willett on managing security issues in the enterprise.
It’s a very long read so I’ll not try to summarise it, instead I’ll repeat the conclusion where he highlights ten ways to keep your data safe.
Standards are the foundation, not proprietary solutions
Don’t [...]
Continue Reading Ten tips for securing data
Tags: computer technology review, michael willett
By Ken Y-N
November 27th, 2008 at 01:52pm
Under Storage
Hitatchi recently announce their new Travelstar 5K500.B, a 2.5 inch 500 GB drive for mobile computers, featuring a halogen-free design and the lowest read/write power requirements in the industry, enough for them to award themselves their new EcoTrac classification for products with low-impact lifecycles.
The security features include optional Bulk Data Encryption for drive-level security, and [...]
Continue Reading Hitachi releasing secure, green, mobile hard drive
Tags: 5k500.b, hitatchi, marketwatch, secude, travelstar
By Ken Y-N
November 27th, 2008 at 09:36am
Under Advocacy+ TNC
I recently read a rather interesting post (both the contents and the writing style!) on how the Trusted Computing Group’s (TCG) Interface For Metadata Access Protocol (IF-MAP) should spread to the cloud, in a post by Chris Hoff on his Rational Survivability blog, entitled I Can Haz TCG IF-MAP Support In Your Security Product, Please….
He [...]
Continue Reading IF-MAP and Cloud Computing
Tags: chris hoff, cloud computing, if-map
By Ken Y-N
November 25th, 2008 at 01:48pm
Under TNC
Network World recently published a story mentioning the presence of the TCG resources page that I have covered recently, but two tangental parts of the article caught my eye:
While TPM has been shipped in thousands and thousands of PCs
Make that millions and millions!
Then, there was the reason that I don’t mention who I work for [...]
Continue Reading TCG NAC resources, and why I blog pseudo-anonymously
Tags: developer, Lisa Lorenzin, networkworld
By Ken Y-N