Changing the status quo for security
by Brian Berger - TCG board member - Monday, 31 January 2011.
Bookmark and Share
When a problem is recognized that impacts virtually everyone and a group of experts provides a solution, what can possibly prevent the solution from being used? If the problem was global warming, with the need to reduce CO2 as the solution, it would be easy to identify the extensive buy-in required from scientists and governments around the world as a major issue. If the problem was a computing and communication tool that did not require a keyboard as the human machine interface and you introduce a product (the iPad) that costs $499, you could have sold over 3 million units in 80 days. That’s immediate acceptance by a significant portion of the world’s population and cost was not an issue.

In contrast, for improved computer security, that comes with virtually every enterprise level computer and server (in other words, it’s free) and just requires activation, the adoption rate has been incredibly slow. According to a study by Aberdeen Research, even though it’s installed in over 300 million desktop and portable computers, only a small fraction of the users have activated the embedded security.


Turn it ON

Most people are not even aware of the security technology in their computer. That’s OK if the technology is enabled when they purchase the computer, but the Trusted Platform Module, or TPM, is an opt-in tool. The TPM, a secure cryptographic integrated circuit (IC), provides a hardware-based root of trust that enables improved computer and network security compared to software-only approaches that can be defeated by the same software they are attempting to detect and block. The TPM was developed by the Trusted Computing Group (TCG) as an open standard, so several companies compete to supply the TPM making it cost competitive. As a result, most leading computer companies install the technology in their computers. In addition to industry experts in computing software, hardware and services, TCG’s members also include companies that have a goal of improving the security in their own operations.

While it can be difficult to establish trust with people, you can easily establish a trusted relationship with a TPM-equipped machine and protect systems and networks. For consumers and enterprises that have PCs, servers and other products with a TPM, they just need to turn the TPM ON. It only takes four easy steps. While not as easy as simply flipping a switch, for corporations with an IT organization, it is a trivial technical challenge. Several companies offer tools to make the widespread implementation of the TPM in an organization even easier. With an activated TPM, users can easily encrypt files, folders and emails as well as more securely manage passwords to avoid unauthorized access to computers and networks.

Spotlight

IT security jobs: What's in demand and how to meet it

Posted on 15 May 2013.  |  Let's say you want a career in information security, where do you start? What credentials do you need? What are employers looking for? Read on to find some answers.


Daily digest

By subscribing to our early morning news update, you will receive a daily digest of the latest security news published on Help Net Security.
  

Weekly newsletter

With over 500 issues so far, reading our newsletter every Monday morning will keep you up-to-date with security risks out there.
  

 
DON'T
MISS

Fri, May 17th
    COPYRIGHT 1998-2013 BY HELP NET SECURITY.   // READ OUR PRIVACY POLICY // ABOUT US // ADVERTISE //