+1 613 254 5456
adjust font size Increase Font Size Reset Font Size Decrease Font Size

One of the advantages of working with Elliptic is the access to security subject matter experts. One of the vehicles that Elliptic uses to help customers navigate security design is its Standards Watch publications which outline the latest security issues – whether it is newly discovered vulnerabilities or updates on new security standards under development at standards bodies or government institutions such as NIST.

 

The latest Standards Watch issue reviews the impending release of the FIPS 140-3 standard, gives an update on the 3GPP /LTE/LTE-A security standards with an introduction to the new security suite for the Chinese 3G wireless market and looks ahead to new work on IPSec standards.


Intel has just announced that it intends to acquire PC-security giant McAfee for $7.68 billion. This big acquisition reflects how important online computing security has become. There is an imperative need to better protect the billions of internet-ready devices when they go online.

 

Security is becoming more and more a requirement and not an option these days. Intel President and Chief Executive Paul Otellini said, “In the past, energy-efficient performance and connectivity have defined computing requirements. Looking forward, security will join those as a third pillar of what people demand from all computing experiences.”

 

Renee James, Intel’s Software and Services Chief said, “As we look at the businesses we’re in, we see that security is the No. 1 purchase consideration. We believe that we can enhance security with hardware and come up with a better solution.”

 

Elliptic President & CEO Richard White said, “I would expect to see that Intel will leverage this acquisition by developing new silicon processors with hardware embedded cryptography and hardware security acceleration combined with embedded software and services which offer end users and application providers a trusted computing environment. This root of trust will be essential for internet connected devices to be able to securely communicate, transact and touch premium content.”

 

This is the same approach that is core to what we do at Elliptic with our complete family of cryptography hardware cores, security middleware and our growing family of key management tools to allow our customers to provide the foundation of a complete root of trust to their end customers.

 

Intel Press Release Link


The latest revision of the Payment Card Industry Data Security Standard (PCI DSS2.0) is expected out in early September with a plan to take effect on Jan 1, 2011. The new version is not expected to require end-to-end encryption of cardholder data – even though the general manager of the PCI Security Standards Council agrees that this is a “good thing”.  In fact, it appears that no major changes are expected over the older PCI DSS1.2 but the new version will clarify enterprise security requirements – including “scoping” out where cardholder data exists on company networks and password strength.

 

PCI Security Standards Council Press Release

PCI Security Standards Organization Web Site


The developer of JailbreakMe2.0, Comex, has made code available to the public that can be used to jailbreak the iPhone operating system and be used for other malicious purposes.

 

NetworkWorld Article


Last week in an article from Network World a question was raised whether or not to allow personal smartphones into an enterprise? Recently, smartphones have made their way into the hands millions of employees working within enterprises at an alarming rate.  Due to the number of employees using their smartphones for personal and business reasons, many companies are now asking themselves if smartphones should be allowed in the enterprise.  Many questions arise from this – such as how will the enterprise conduct security controls on smartphones owned by the employee, not the enterprise?

 

To read the full article, please click the link below:

 

http://www.networkworld.com/news/2010/080610-smartphone-enterprise-security.html?hpg1=bn


주요 제품

mediaETS-020: tVault HDCP 2.2
A proven HDCP-based content protection solution that provides robust security inside Trusted Execution Environments (TEEs) and enforces the protection of sensitive information to ensure that it is stored, processed and accessed only by authorized applications.The solution integrates seamlessly within frameworks such as ARM TrustZone™, where the critical security components are embedded in a trusted and secure OS environment. The non-critical components are executed by the rich OS, such as Android.

towerCLP - 630: 멀티 패킷 관리자 보안 엔진
고기능적이고 독특한 보안 프로토콜 가속기는 고용량 무선 및 네트워크 응용 소프트웨어의 데이터를 효율적으로 처리하기 위해 특별히 설계되었습니다. 이 엔진은 여러 활성 연결 및4G LTE - 고급 무선 셀룰러 기지국과 펨토셀 등 다양한 내용의 상당한 트래픽 로드를 다루는 응용 소프트웨어에 완벽히 적합합니다.