Penetration testing or Pen testing as it is commonly known, is a simulated attack against your infrastructure and systems to check for vulnerabilities that may be exploited by Cyber Attackers. The NCSC describes penetration testing as “A method for gaining assurance in the security of an IT system by attempting Read more…
A hardware security module (HSM) is a trusted physical computing device that performs a variety of cryptographic operations, such as signing, signature validation, encryption, decryption and hashing. Hardware Security Modules typically come in the form of a physical appliance utilising specialised hardware and Operating Systems (OS) connected directly to the Read more…
Software code signing is the process of verifying software to ensure it has come from a legitimate source. In this blog we discuss the importance of software code signing and the implications of not maintaining certificates.
Public Key Infrastructure (PKI) is an infrastructure designed to provide integrity, authentication and confidentiality of electronic information. The infrastructure and associated processes provide the capabilities to manage secure cryptographic credentials and distribute them to individuals and devices to enable secure transactions to occur. Public Key Infrastructure (PKI) is a general Read more…
In this post we discuss the available ways to store Digital key material and the benefits/issues associated with each method along with the challenges posed by the continued migration to the cloud and the solutions that the providers have made available. On-Premise Hardware Security Module As outlined in an earlier Read more…
If you are using Microsoft Azure and require cryptographic services and secure key management then Azure dedicated HSM may be the solution for you. Azure Dedicated HSM provides subscribers with single-tenant FIPS 140-2 Level 3 certified devices that Microsoft manage and monitor but the customer controls. Microsoft has designed the Read more…
If you are using AWS Cloud services and require strong encryption then utilising your on-premise HSM may be impractical or undesirable. AWS Cloud HSM is a FIPS 140-2 Level 3 certified Hardware Security Module specifically deployed within the cloud utilising a Pay-As-You-Go (PAYG) charging model. AWS CloudHSM offers storage and Read more…
Whether it is generally known outside of select groups, Public Key Infrastructure is at the heart of digital communication. PKI is a framework covering encryption, policies and procedures to protect communication and verify identities. PKI has at its core the concept of trust, digital certificates are used as a trusted Read more…