Hardware Really Matters for Computer Functionality and Security

It may be stating the obvious to say that the hardware you use has a direct impact on the functionality of your IT. That is so fundamental of a statement it really goes without saying. But for some reason decision-makers gloss over the importance of hardware to security design. Why? The hardware you pick has a direct impact on the security of your enterprise.

This matters at even layer of your enterprise. From devices to networks to servers and storage. The hardware you use has security ramifications.

Consider, for example, Intel Corporation’s vPro technology. This is a capability that comes with modern PC’s.  This component of hardware provides management features that enable systems administrators to exert control over devices to ensure computers are operating well and to ensure they are working securely.  This capability enables remote management, security monitoring and updating of PCs. vPro has several components (my favorites are Intel Active Management Technology (AMT) and Intel Trusted Execution Technology (TXT).  AMT is hardware that enables the secure remote management of enterprise PCs. TXT is the only technology I know of that verifies the launch environment and establishes a root of trust. TXT enables trust at a fundamental/foundational layer.  Without it, no PC can be secure. With it, more secure, resilient systems can be configured and operated and entire enterprises can be made more resilient.

For more on AMT and TXT see: http://ipip.intel.com/go/fedgov/

And for more on hardware and security see: http://www.intel.com/technology/security/index.htm

 

About BobGourley

Bob Gourley is Crucial Point LLC’s founder and editor of CTOvision.com. Bob has received industry recognition including Infoworld top CTO award, AFCEA’s meritorious service award, and recognition as one of the top 100 “Tech Titans” in DC by Washingtonian magazine. He was named one of the “Top 25 Most Fascinating Communicators in Government IT.”

  • http://www.delicious.com/oadv Jenson Daniel

    In my cyber-security class last night Mr. Dennis Cox of Breaking Point explained some of the history and a lot of the need for custom fuzzers. He looked at the chart of CVEs then segmented them into Imporant, Unimportant, Common, and Unique. Then he gave a story about a Broadcom A-Zero chip from early last decade. Traditionally these are for the research community. They were in demand so they got sent to vendors. Unfortunately the designers left a VLAN element that made the chip, and thus the hardware it supported, entirely open to exploitation. The vendors knew but nobody talked. You’re right about hardware and it’s relationship to trusted computing.

    • http://ctovision.com Bob Gourley

      Thanks Jenson. That is a great anecdote regarding hardware security. It totally underscores the need for security by design.

  • Glenn Jensen

    Hey Bob…. what about Solaris Cryptographic Framework and crypto-in-silicon on the CMT SPARC Chips? Huge gains on SSL and other security needs – Glenn

  • http://ctovision.com Bob Gourley

    Thanks Glenn. I agree. That is another example of hardware support to security.