Improving client systems security with Qubes OS
|
|
|
- Phyllis Hopkins
- 5 years ago
- Views:
Transcription
1 4 Jul 2016
2 We need secure client systems
3 We need secure client systems Otherwise no security really works:
4 We need secure client systems Otherwise no security really works: Encryption 2-factor authentication Secure cloud All the above can be manipulated by compromised client system.
5 Current, monolithic systems All the drivers, services part of TCB
6 Current, monolithic systems All the drivers, services part of TCB Networking - DHCP client, Wifi
7 Current, monolithic systems All the drivers, services part of TCB Networking - DHCP client, Wifi Every application have access to all the user data
8 Current, monolithic systems All the drivers, services part of TCB Networking - DHCP client, Wifi Every application have access to all the user data PDF viewer
9 Current, monolithic systems All the drivers, services part of TCB Networking - DHCP client, Wifi Every application have access to all the user data PDF viewer Web browser
10 Current, monolithic systems All the drivers, services part of TCB Networking - DHCP client, Wifi Every application have access to all the user data PDF viewer Web browser Mail client
11 Current, monolithic systems All the drivers, services part of TCB Networking - DHCP client, Wifi Every application have access to all the user data PDF viewer Web browser Mail client Lack of GUI separation
12 Current, monolithic systems All the drivers, services part of TCB Networking - DHCP client, Wifi Every application have access to all the user data PDF viewer Web browser Mail client Lack of GUI separation One bug to rule them all
13 Compartmentalization Separate each component from each other
14 Compartmentalization Separate each component from each other Divide the whole system into security domains
15 Compartmentalization Separate each component from each other Divide the whole system into security domains Use virtualisation, have minimal, simple interfaces
16
17 Isolated devices Net VM
18 Isolated devices Net VM USB VM
19 Isolated devices Net VM USB VM GUI VM (planned)
20 Isolated data Different areas of digital life Different levels of trust Not only about separating applications!
21 Isolated workflows Proxy VM (VPN, Tor, Whonix) Data converters (PDF, images) Data storage (offline vaults, gpg) Disposable VM
22 Framework for building secure workflows Socket-like inter-vm communication (qrexec) Each operation requires policy approval (not necessary user approval) VMs - building blocks
23 Block/USB devices handling Dedicated USB VM
24 Block/USB devices handling Dedicated USB VM Untrusted, no user data
25 Block/USB devices handling Dedicated USB VM Untrusted, no user data Services for specific applications
26 Block/USB devices handling Dedicated USB VM Untrusted, no user data Services for specific applications
27 Block/USB devices handling Dedicated USB VM Untrusted, no user data Services for specific applications Supported devices Block devices - can be attached to any VM
28 Block/USB devices handling Dedicated USB VM Untrusted, no user data Services for specific applications Supported devices Block devices - can be attached to any VM Input devices - strictly filtered (mouse only/mouse+keyboard)
29 Block/USB devices handling Dedicated USB VM Untrusted, no user data Services for specific applications Supported devices Block devices - can be attached to any VM Input devices - strictly filtered (mouse only/mouse+keyboard) Generic USB passthrough
30 Split GPG Like software-based smartcard
31 Split GPG Like software-based smartcard Better control
32 Split GPG Like software-based smartcard Better control Audit trail
33 Split GPG Like software-based smartcard Better control Audit trail /bin/gpg drop-in replacement
34
35
36 Networking Network devices in separate VMs
37 Networking Network devices in separate VMs Dom0 has no network at all!
38 Networking Network devices in separate VMs Dom0 has no network at all! VMs can be chained (proxy)
39 Networking Network devices in separate VMs Dom0 has no network at all! VMs can be chained (proxy) VPN, Tor, IDS, and many more
40
41 Qubes 3.x Qubes 3.1 released in March 2016 Qubes 3.2-rc1 released last month Supports everything mentioned here.
42 Qubes 3.x Qubes 3.1 released in March 2016 Qubes 3.2-rc1 released last month Supports everything mentioned here. Management stack Powerful framework for building secure client system. Sample recipes provided We need more!
43 Qubes Master Signing Key 427F 11FD 0FAA 4B F01C DDFA 1A3E
44 Questions?
45 Thanks!
Combining program verification with component-based architectures. Alexander Senier BOB 2018 Berlin, February 23rd, 2018
Combining program verification with component-based architectures Alexander Senier BOB 2018 Berlin, February 23rd, 2018 About Componolit 2 What happens when we use what's best? 3 What s Best? Mid-90ies:
Enabling the Mobile Professional
Enabling the Mobile Professional Shawn Misquitta Senior Director of Technology What s driving the need for mobile solutions? Wireless and data connections are becoming ubiquitous and users expect to be
Paperspace. Security Primer & Architecture Overview. Business Whitepaper. 20 Jay St. Suite 312 Brooklyn, NY 11201
Paperspace Security Primer & Architecture Overview Copyright 2017 Paperspace, Co. All Rights Reserved - 1 - Business Whitepaper Paperspace www.paperspace.com Paperspace Virtual Desktops: A foundation for
VIRTUAL CENTRAL LOCK
VIRTUAL CENTRAL LOCK INSTALLATION GUIDE Table of contents 1. Introduction...3 1.1. Main features...3 1.2. Technical requirements...3 2. Installing TOSIBOX Virtual Central Lock...4 2.1. VMWare vsphere/esxi...4
Holistic Database Security
Holistic Database Security 1 Important Terms Exploit: Take advantage of a flaw or feature Attack Surface: Any node on the network that can be attacked. That can be the UI, People, anything that touches
G/On. G/On is available for Windows, MacOS and Linux (selected distributions).
G/On Soliton G/On is a remote access solution which establishes connections between a remote device and application servers inside an organisations network. A secure gateway is used to separate the remote
Demonstration Lecture: Cyber Security (MIT Department) Trusted cloud hardware and advanced cryptographic solutions. Andrei Costin
Demonstration Lecture: Cyber Security (MIT Department) Trusted cloud hardware and advanced cryptographic solutions Topic Prerequisites Security concepts Security-related concepts (e.g., entropy) Virtualization
License Management for the ASA
Cisco Smart Software Licensing lets you purchase and manage a pool of licenses centrally. You can easily deploy or retire devices without having to manage each unit s license key. Smart Software Licensing
Use Cases for Argonaut Project -- DRAFT Page
Use Cases for Argonaut Project -- DRAFT Page 1 Use Cases for Argonaut Project DRAFT V0.3 March 03, 2015 Use Cases for Argonaut Project -- DRAFT Page 2 Introduction The Argonaut Project seeks to rapidly
Massively Parallel Hardware Security Platform
Massively Parallel Hardware Security Platform Dan Cvrček, Enigma Bridge, UK dan@enigmabridge.com Petr Švenda, CRoCS, Masaryk University, CZ svenda@fi.muni.cz Overview 1. Cryptography as a Service 2. Usage
Xerox Audio Documents App
Xerox Audio Documents App Additional information, if needed, on one or more lines Month 00, 0000 Information Assurance Disclosure 2018 Xerox Corporation. All rights reserved. Xerox, Xerox,
Citrix Receiver for Windows (Store)
Citrix Receiver for Windows (Store) Citrix Receiver for Windows (Store) is client software available for download from the Microsoft store. It enables users to access virtual desktops and hosted applications
Zero Trust in Healthcare Centrify Corporations. All Rights Reserved.
Zero Trust in Healthcare 1 CYBER OFFENSE REDEFINED: TRANSFORM YOUR SECURITY POSTURE WITH ZERO TRUST 2 What Keeps CIOs Up at Night? How exposed are we, anyway? Who can access what? Can we trust our partners?
Windows 10 Tips and Tricks
Windows 10 Tips and Tricks You've made the move to Windows 10. The Start Menu has returned and its cloud integration is obvious, but most everything else is unfamiliar. This session will help you setup
ticrypt DEPLOYMENT OVERVIEW AND TIMELINE Information about hardware, deployment, and on-boarding
ticrypt DEPLOYMENT OVERVIEW AND TIMELINE Information about hardware, deployment, and on-boarding THOMAS SAMANT thomas@terainsights.com Tera Insights, LLC Feb 15th 2018 ALIN DOBRA alin@terainsights.com
SECURITY ARCHITECTURES CARSTEN WEINHOLD
Department of Computer Science Institute of System Architecture, Operating Systems Group SECURITY ARCHITECTURES CARSTEN WEINHOLD MOTIVATION Common observations: Complex software has security bugs Users
CIS Controls Measures and Metrics for Version 7
Level One Level Two Level Three Level Four Level Five Level Six 1.1 Utilize an Active Discovery Tool Utilize an active discovery tool to identify devices connected to the organization's network and update
TRESCCA Trustworthy Embedded Systems for Secure Cloud Computing
TRESCCA Trustworthy Embedded Systems for Secure Cloud Computing IoT Week 2014, 2014 06 17 Ignacio García Wellness Telecom Outline Welcome Motivation Objectives TRESCCA client platform SW framework for
Administering. Windows Server 2012 R2. Exam Wiley. Patrick Regan
Administering Windows Server 2012 R2 Exam 70-411 Patrick Regan Wiley Contents j Lesson 1: Deploying and Managing Server Images 1 Using Windows Deployment Services 2 Installing the Windows Deployment Services
CIS Controls Measures and Metrics for Version 7
Level 1.1 Utilize an Active Discovery Tool 1.2 Use a Passive Asset Discovery Tool 1.3 Use DHCP Logging to Update Asset Inventory 1.4 Maintain Detailed Asset Inventory 1.5 Maintain Asset Inventory Information
Configuring Secure Socket Layer HTTP
This feature provides Secure Socket Layer (SSL) version 3.0 support for the HTTP 1.1 server and HTTP 1.1 client within Cisco IOS software. SSL provides server authentication, encryption, and message integrity
Department of Computer Science Institute for System Architecture, Operating Systems Group TRUSTED COMPUTING CARSTEN WEINHOLD
Department of Computer Science Institute for System Architecture, Operating Systems Group TRUSTED COMPUTING CARSTEN WEINHOLD THIS LECTURE... Today: Technology Lecture discusses basics in context of TPMs
Configuring Secure Socket Layer HTTP
This feature provides Secure Socket Layer (SSL) version 3.0 support for the HTTP 1.1 server and HTTP 1.1 client within Cisco IOS software. SSL provides server authentication, encryption, and message integrity
A look at QubesOS and CopperheadOS. Konstantin Ryabitsev. The Linux Foundation Linux Security Summit, 2018
LIFE BEHIND THE TINFOIL CURTAIN A look at QubesOS and CopperheadOS Konstantin Ryabitsev The Linux Foundation Linux Security Summit, 2018 TOPICS COVERED Why did you do this to yourself? Qubes OS Copperhead
SECURITY ARCHITECTURES CARSTEN WEINHOLD
Department of Computer Science Institute of System Architecture, Operating Systems Group SECURITY ARCHITECTURES CARSTEN WEINHOLD MOTIVATION Common observations: Complex software has security bugs Users
Release Notes. NCP Volume License Server (Win32/64) 1. New Features and Enhancements. 2. Improvements / Problems Resolved. 3.
NCP Volume License Server (Win32/64) Service Release: 1.02 build 012 Date: August 2013 Installations on Windows 8 are now supported. If a Client had been deactivated in the VLS, this Client can be bound
Google Cloud Platform: Customer Responsibility Matrix. December 2018
Google Cloud Platform: Customer Responsibility Matrix December 2018 Introduction 3 Definitions 4 PCI DSS Responsibility Matrix 5 Requirement 1 : Install and Maintain a Firewall Configuration to Protect
Configuring Secure Socket Layer HTTP
Finding Feature Information, page 1 Information about Secure Sockets Layer (SSL) HTTP, page 1 How to Configure Secure HTTP Servers and Clients, page 4 Monitoring Secure HTTP Server and Client Status, page
AXIAD IDS CLOUD SOLUTION. Trusted User PKI, Trusted User Flexible Authentication & Trusted Infrastructure
AXIAD IDS CLOUD SOLUTION Trusted User PKI, Trusted User Flexible Authentication & Trusted Infrastructure Logical Access Use Cases ONE BADGE FOR CONVERGED PHYSICAL AND IT ACCESS Corporate ID badge for physical
Trust Infrastructure of SSL
Trust Infrastructure of SSL CS 470 Introduction to Applied Cryptography Ali Aydın Selçuk CS470, A.A.Selçuk SSL Trust 1 SSL/TLS The main workhorse of secure Internet communication. Everyday, billions of
The Internet of Things and Security
INTERNAL USE ONLY The Internet of Things and Security Chuck DePalma CISSP CISM Network and Cloud Security Architect The Internet of Things 1998 Adoption of Mosaic Browsers 0ver 250 Millions of Internet
2 Me. 3 The Problem. Speaker. Company. Ed Breay Sr. Sales Engineer, Hitachi ID Systems.
1 2 Me Speaker Ed Breay Sr. Sales Engineer, Hitachi ID Systems. Company Hitachi, Ltd.: a 100 year old Fortune 100 conglomerate. Hitachi ID Systems, Inc.: a 19 year old IAM software subsidiary. Headquarters
Terra: A Virtual Machine-Based Platform for Trusted Computing by Garfinkel et al. (Some slides taken from Jason Franklin s 712 lecture, Fall 2006)
Terra: A Virtual Machine-Based Platform for Trusted Computing by Garfinkel et al. (Some slides taken from Jason Franklin s 712 lecture, Fall 2006) Trusted Computing Hardware What can you do if you have
Department of Computer Science Institute for System Architecture, Operating Systems Group TRUSTED COMPUTING CARSTEN WEINHOLD
Department of Computer Science Institute for System Architecture, Operating Systems Group TRUSTED COMPUTING CARSTEN WEINHOLD THIS LECTURE... Today: Technology Lecture discusses basics in context of TPMs
50331 Windows Client, Enterprise Desktop Support Technician
Course This course provides students with the knowledge and skills needed to isolate, document and resolve problems on Windows Desktops in a corporate domain. The material is geared towards corporate IT
Security+ SY0-501 Study Guide Table of Contents
Security+ SY0-501 Study Guide Table of Contents Course Introduction Table of Contents About This Course About CompTIA Certifications Module 1 / Threats, Attacks, and Vulnerabilities Module 1 / Unit 1 Indicators
MaaS360 Secure Productivity Suite
MaaS360 Secure Productivity Suite Frequently Asked Questions (FAQs) What is MaaS360 Secure Productivity Suite? MaaS360 Secure Productivity Suite integrates a set of comprehensive mobile security and productivity
CIS 5373 Systems Security
CIS 5373 Systems Security Topic 3.1: OS Security Basics of secure design Endadul Hoque Slide Acknowledgment Contents are based on slides from Ninghui Li (Purdue), John Mitchell (Stanford), Dan Boneh (Stanford)
Introduction to Qubes OS
Introduction to Qubes OS bhyvecon Tokyo 2014 @ntddk Self-introduction Yuma Kurogome(@ntddk) Takeda Lab @ KEIO Univ. Researching about security in low-layer Participant of Security Camp '11, '13 CTF player
Who s Protecting Your Keys? August 2018
Who s Protecting Your Keys? August 2018 Protecting the most vital data from the core to the cloud to the field Trusted, U.S. based source for cyber security solutions We develop, manufacture, sell and
for Multi-Services Gateways
KURA an OSGi-basedApplication Framework for Multi-Services Gateways Introduction & Technical Overview Pierre Pitiot Grenoble 19 février 2014 Multi-Service Gateway Approach ESF / Increasing Value / Minimizing
Using Novell Filr App to Access CECHCloud on an ipad or iphone
Using Novell Filr App to Access CECHCloud on an ipad or iphone About CECHCloud... 2 Installing and Configuring the Novell Filr App... 2 Navigating the Filr App... 4 Working with Files... 7 Viewing Files...
Improving Password Management. Laura Raderman, Policy and Compliance Coordinator, ISO Ole Villadsen, Research Liaison, Cybersecurity, UL
Improving Password Management Laura Raderman, Policy and Compliance Coordinator, ISO Ole Villadsen, Research Liaison, Cybersecurity, UL Password Management How many passwords do you have? Are they all
CLIQ Remote - System description and requirements
CLIQ Remote - System description and requirements 1. Introduction CLIQ Remote - Access at a distance CLIQ Remote is an electromechanical lock system with an additional level of security and flexibility,
Secure Server Project. Xen Project Developer Summit 2013 Adven9um Labs Jason Sonnek
Secure Server Project Xen Project Developer Summit 2013 Adven9um Labs Jason Sonnek 1 Outline I. Mo9va9on, Objec9ves II. Threat Landscape III. Design IV. Status V. Roadmap 2 Mo9va9on In a nutshell: Secure
Due Diligence March 2018 Page 1 of 6. Company
Page 1 of 6 Company Company details Services offered Selectapension Limited, Selectapension House, Eridge Road, Crowborough, East Sussex, TN6 2SL, 01892 669494, www.selectapension.com. Registered in England
Advanced Security and Mobile Networks
WJ Buchanan. ASMN (1) Advanced Security and Mobile Networks Unit 1: Network Security Application Presentation Session Transport Network Data Link Physical OSI Application Transport Internet Internet model
Security Engineering for Software
Security Engineering for Software CS996 CISM Jia An Chen 03/31/04 Current State of Software Security Fundamental lack of planning for security Most security issues come to light only after completion of
The Balabit s Privileged Session Management 5 F5 Azure Reference Guide
The Balabit s Privileged Session Management 5 F5 Azure Reference Guide March 12, 2018 Abstract Administrator Guide for Balabit s Privileged Session Management (PSM) Copyright 1996-2018 Balabit, a One Identity
License Management for the ASA
Cisco Smart Software Licensing lets you purchase and manage a pool of licenses centrally. You can easily deploy or retire devices without having to manage each unit s license key. Smart Software Licensing
Intelligent Solutions for the most Rigorous IT Security Requirements
Intelligent Solutions for the most Rigorous IT Security Requirements 1 2 1 2 3 Information Security from the Architects of Modern Encryption Systems SINA (Secure Inter-Network Architecture) enables the
General Data Protection Regulation
General Data Protection Regulation Workshare Ltd ( Workshare ) is a service provider with customers in many countries and takes the protection of customers data very seriously. In order to provide an enhanced
Wireless Security and Monitoring. Training materials for wireless trainers
Wireless Security and Monitoring Training materials for wireless trainers Goals to understand which security issues are important to consider when designing WiFi networks to be introduced to encryption,
INFLUENTIAL OPERATING SYSTEM RESEARCH: SECURITY MECHANISMS AND HOW TO USE THEM CARSTEN WEINHOLD
Faculty of Computer Science Institute of Systems Architecture, Operating Systems Group INFLUENTIAL OPERATING SYSTEM RESEARCH: SECURITY MECHANISMS AND HOW TO USE THEM CARSTEN WEINHOLD OVERVIEW Fundamental
An Introduction to Key Management for Secure Storage. Walt Hubis, LSI Corporation
An Introduction to Key Management for Secure Storage Walt Hubis, LSI Corporation SNIA Legal Notice The material contained in this tutorial is copyrighted by the SNIA. Member companies and individuals may
Trusted Virtual Domains: Towards Trustworthy Distributed Services. Ahmad-Reza Sadeghi System Security Lab Ruhr-Universität Bochum
Trusted Virtual Domains: Towards Trustworthy Distributed Services Ahmad-Reza Sadeghi System Security Lab Ruhr-Universität Bochum The Main Motivation Trustworthy Distributed Computing Selected Applications..
Configuring Secure Socket Layer HTTP
Finding Feature Information, page 1 Information about Secure Sockets Layer (SSL) HTTP, page 1 How to Configure Secure HTTP Servers and Clients, page 5 Monitoring Secure HTTP Server and Client Status, page
Secure VFX in the Cloud. Microsoft Azure
Secure VFX in the Cloud Burst rendering, storage, and key management Microsoft Azure Joel Sloss, Microsoft Board of Directors, CDSA Agenda No premise for On-Premises Is it safe? On Being Internet-connected
Introduction With the move to the digital enterprise, all organizations regulated or not, are required to provide customers and anonymous users alike
Anonymous Application Access Product Brief Contents Introduction 1 The Safe-T Solution 1 How It Works 2-3 Capabilities 4 Benefits 4 List 5-11 Introduction With the move to the digital enterprise, all organizations
Operating System Security
Operating System Security Operating Systems Defined Hardware: I/o...Memory.CPU Operating Systems: Windows or Android, etc Applications run on operating system Operating Systems Makes it easier to use resources.
Intelligent Solutions for the Highest IT Security Requirements
Intelligent Solutions for the Highest IT Security Requirements 3 Information security from the architects of modern cryptographic systems SINA (Secure Inter-Network Architecture) enables the protected
Canadian Access Federation: Trust Assertion Document (TAD)
Purpose A fundamental requirement of Participants in the Canadian Access Federation is that they assert authoritative and accurate identity attributes to resources being accessed, and that Participants
FilesAnywhere Features List
FilesAnywhere Feature List FilesAnywhere Page 1 of 9 Contents Basic Features... 3 Advanced Features... 7 Enterprise Features... 9 FilesAnywhere Page 2 of 9 Basic Features No File Size Limit: There is no
Avaya Converged Platform 130 Series. idrac9 Best Practices
Avaya Converged Platform 130 Series idrac9 Best Practices Release 4.0 December 2018 2018 Avaya Inc. All Rights Reserved Notice While reasonable efforts were made to ensure that the information in this
EN-2000 Quick Configuration Guide
Document Part Number 17539.0000 Version A.8, March 2018 2018 Encore Networks, Inc. All rights reserved. EN-2000 Quick Configuration Guide T he EN-2000 is a high-performance, low-cost VPN router designed
Google Cloud Platform: Customer Responsibility Matrix. April 2017
Google Cloud Platform: Customer Responsibility Matrix April 2017 Introduction 3 Definitions 4 PCI DSS Responsibility Matrix 5 Requirement 1 : Install and Maintain a Firewall Configuration to Protect Cardholder
Best Practices for PCI DSS Version 3.2 Network Security Compliance
Best Practices for PCI DSS Version 3.2 Network Security Compliance www.tufin.com Executive Summary Payment data fraud by cyber criminals is a growing threat not only to financial institutions and retail
Firewalls Network Security: Firewalls and Virtual Private Networks CS 239 Computer Software March 3, 2003
Firewalls Network Security: Firewalls and Virtual Private Networks CS 239 Computer Software March 3, 2003 A system or combination of systems that enforces a boundary between two or more networks - NCSA
Kerberos and Public-Key Infrastructure. Key Points. Trust model. Goal of Kerberos
Kerberos and Public-Key Infrastructure Key Points Kerberos is an authentication service designed for use in a distributed environment. Kerberos makes use of a thrusted third-part authentication service
From Human Machine Interface to Web Machine Interface
From Human Machine Interface to Web Machine Interface - Innovation of HMI - July, 2016 Ver. 2.0-1 - All Rights Reserved. Web Machine Interface offers two services to all V9 series below: VPN remote access
CVE / "POODLE"
NCP Volume License Server (Win32/64) Service Release: 2.00 build 19725 Date: April 2017 Prerequisites Operating System Support The following Microsoft Operating Systems are supported with this release:
CSE543 Computer and Network Security Module: Network Security
CSE543 Computer and Network Security Module: Network Security Professor Trent Jaeger CSE543 - Introduction to Computer and Network Security 1 2 Communication Security Want to establish a secure channel
Using Smart Cards to Protect Against Advanced Persistent Threat
Using Smart Cards to Protect Against Advanced Persistent Threat Smart Cards in Government Oct 30, 2014 Chris Williams Export Approval # 14-leidos-1016-1281 Agenda Who is Leidos? The Identity Challenge
Secure Architecture Principles
CS 155 Spring 2016 Secure Architecture Principles Isolation and Least Privilege Access Control Concepts Operating Systems Browser Isolation and Least Privilege Acknowledgments: Lecture slides are from
THE HSL SECURE KVM COMBINERS. Simultaneously interact with multiple computers on the same screen
THE HSL SECURE KVM COMBINERS Simultaneously interact with multiple computers on the same screen THE NEED 1 Demanding environments require real-time presentation of information from isolated computers on
10/4/2016. Advanced Windows Services. IPv6. IPv6 header. IPv6. IPv6 Address. Optimizing 0 s
Advanced Windows Services IPv6 IPv6 FSRM, FCI, DAC and RMS PKI IPv6 IP is the foundation of nearly all communication The number of addresses is limited Technologies like NAT help in addition to enhancements
Why Security Fails in Federated Systems
Why Security Fails in Federated Systems Dr. Clifford Neuman, Director USC Center for Computer Systems Security Information Sciences Institute University of Southern California CSSE Research Review University
Gateway, routing data between sensors and cloud
Data Sheet, routing data between sensors and cloud for routing data between sensors/repeaters and the cloud, ReCalc. Route data to and from up to 500 sensors. Transmits data to ReCalc using Ethernet, mobile
Restech. User Security AVOIDING LOSS GAINING CONFIDENCE IN THE FACE OF TODAY S THREATS
Restech User Security AVOIDING LOSS GAINING CONFIDENCE IN THE FACE OF TODAY S THREATS Your presenter: Vince Gremillion, CISSP 30+ years technical and customer service experience Founder/Co-Owner RESTECH
Securing IoT with the ARM mbed ecosystem
Securing IoT with the ARM mbed ecosystem Xiao Sun / Senior Applications Engineer / ARM ARM mbed Connect / Shenzhen, China December 5, 2016 Lots of interest in IoT security Researchers are looking into
Software Manual Net Configuration Tool Rev. 4.05
Software Manual Net Configuration Tool Rev. 4.05 http://www.bixolon.com Introduction 1. About this manual... 3 2. Supported Operating Systems... 3 3. Supported Printers... 4 4. Before Startup... 5 5. Installation
Codebook. Codebook for OS X Introduction and Usage
Codebook Codebook for OS X Introduction and Usage What is Codebook Encrypted Data Vault Guards passwords and private data Keeps sensitive information organized Enables quick recall of secrets Syncs data
Accessing CharityMaster data from another location
Accessing CharityMaster data from another location When all of your computers are on the same Local Area Network (LAN), you can place the back end files (including your data and the Word templates) onto
PRICE LIST TRUST SERVICE PRODUCTS. Price List Version 5.9 Berlin, April Copyright 2018, Bundesdruckerei GmbH. Seite 1/9
PRICE LIST TRUST SERVICE PRODUCTS Price List Version 5.9 Berlin, April 2018 Copyright 2018, Bundesdruckerei GmbH Seite 1/9 Qualified Single Signature Cards D-TRUST Card 3.0 EU Signature card according
TLS 1.1 Security fixes and TLS extensions RFC4346
F5 Networks, Inc 2 SSL1 and SSL2 Created by Netscape and contained significant flaws SSL3 Created by Netscape to address SSL2 flaws TLS 1.0 Standardized SSL3 with almost no changes RFC2246 TLS 1.1 Security
Understand & Prepare for EU GDPR Requirements
Understand & Prepare for EU GDPR Requirements The information landscape has changed significantly since the European Union (EU) introduced its Data Protection Directive in 1995 1 aimed at protecting the
Configuration and Day 2 Operations First Published On: Last Updated On:
Configuration and Day 2 Operations First Published On: 05-12-2017 Last Updated On: 12-26-2017 1 Table of Contents 1. Configuration and Day 2 Operations 1.1.Top Day 2 Operations Knowledge Base Articles
Network Security Fundamentals
Network Security Fundamentals Security Training Course Dr. Charles J. Antonelli The University of Michigan 2013 Network Security Fundamentals Module 6 Firewalls & VPNs Topics Firewall Fundamentals Case
Topics in Systems and Program Security
Systems and Internet Infrastructure Security Network and Security Research Center Department of Computer Science and Engineering Pennsylvania State University, University Park PA Topics in Systems and
Secure Architecture Principles
CS 155 Spring 2016 Secure Architecture Principles Isolation and Least Privilege Access Control Concepts Operating Systems Browser Isolation and Least Privilege Acknowledgments: Lecture slides are from
PKI is Alive and Well: The Symantec Managed PKI Service
PKI is Alive and Well: The Symantec Managed PKI Service Marty Jost Product Marketing, User Authentication Lance Handorf Technical Enablement, PKI Solutions 1 Agenda 1 2 3 PKI Background: Problems and Solutions
Hypervisor Security First Published On: Last Updated On:
First Published On: 02-22-2017 Last Updated On: 05-03-2018 1 Table of Contents 1. Secure Design 1.1.Secure Design 1.2.Security Development Lifecycle 1.3.ESXi and Trusted Platform Module 2.0 (TPM) FAQ 2.
Provisioning secure Identity for Microcontroller based IoT Devices
Provisioning secure Identity for Microcontroller based IoT Devices Mark Schaeffer, Sr. Product Marketing Manager, Security Solutions Synergy IoT Platform Business Division, Renesas Electronics, Inc. May
Implementing and Administering Security in a Microsoft Windows 2000 Network Course 2820 Five days Instructor-led Published: February 17, 2004
Implementing and Administering Security in a Microsoft Windows 2000 Network Course 2820 Five days Instructor-led Published: February 17, 2004 Introduction This five-day instructor-led course provides students
COURSE OUTLINE IT TRAINING
CMB-207-1I Citrix XenApp and XenDesktop Fast Track Duration: 5 days Overview: This fast-paced course covers select content from training courses CXA-206 and CXD- 202 and provides the foundation necessary
NETGEAR-FVX Relation. Fabrizio Celli;Fabio Papacchini;Andrea Gozzi
NETGEAR-FVX538 Relation Fabrizio Celli;Fabio Papacchini;Andrea Gozzi -2008- Abstract Summary... 2 Chapter 1: Introduction... 4 Chapter 2: LAN... 6 2.1 LAN Configuration... 6 2.1.1 First experiment: DoS
Testing Microservices Techniques for Automation
Testing Microservices Techniques for Automation European Testing Conference 2018 Emily Bache @emilybache Emily Bache Practice Lead for Test Automation Consultant Author of The Coding Dojo Handbook @emilybache
Enterprise IPv6, Affecting Positive Change
Enterprise IPv6, Affecting Positive Change Rich Lewis IPv6 Product Manager, Oracle Global IT TXv6TF, March 2014 I am not an Oracle spokesperson, the views and opinions expressed in this presentation are
Cloud Security Standards Supplier Survey. Version 1
Cloud Security Standards Supplier Survey Version 1 Document History and Reviews Version Date Revision Author Summary of Changes 0.1 May 2018 Ali Mitchell New document 1 May 2018 Ali Mitchell Approved Version
Willis Mobile Device Access Security Policy. Date: July-2014 Version: 2.0 FINAL
Willis Mobile Device Access Security Policy Date: July-2014 Version: 2.0 FINAL Willis Mobile Device Access Security Policy v2.0.docx Page: 1/8 30-Jul-2014 Contents Introduction... 3 Supported Platforms...