EE Times notes some interesting product news involving chip maker ATMEL and Amazon, aka “the IoT’s back end.” According to the report, Amazon is partnering with ATMEL’s parent company, Microchip, to enable seamless provisioning of IoT devices with end to end encryption. The partnership will marry Microchip’s Atmel’s ECC508 chip to marry the company’s “Zero touch” platform with Amazon’s new(ish) “Just in Time Registration” service, which streamlines device activation. The partnership is designed to address some noted problems with secure IoT deployments. Namely: key generation on low power IoT devices, securing keys throughout long and complex manufacturing chain, securing communications between the IoT endpoint and the (cloud ) management server and then securing and managing the endpoint throughout its life. The ECC508 is designed to address a number of those challenges. It uses elliptic curve cryptography and is tamper resistant, with defenses against “microprobe, emissions analysis, timing, and other attacks.” Behind the scenes AWS;s Zero-touch secure […]
Search Results for "encryption"
Beware: Targeted Attacks on iPhone Users are a Thing | Lookout Blog
In-brief: Lookout said it identified an active threat that was using three critical iOS zero-day (that is: previously unknown) vulnerabilities. When exploited, the three vulnerabilities “form an attack chain that subverts even Apple’s strong security environment.”
How the NSA snooped on Cisco Customers for a Decade | Ars Technica
In-brief: Ars Technica has a good write-up of the ongoing news about how the NSA used tools that exploited known vulnerabilities in networking and security products by Cisco, Juniper, Fortinet and others to spy on customers of those companies.
Researcher Warns of Holes In Smart Thermostats
In-brief: A researcher from the firm Trustwave warns that Trane ComfortLink smart thermostats suffer from a string of security woes, including hard coded administrator credentials.
Update: Regulator says Ransomware Infections Likely Reportable Under HIPAA
In-brief: The Department of Health and Human Services issued guidance that declared most ransomware infections to be reportable under the Federal HIPAA patient privacy law.