sb-nz logo
Story image

HPE's industry-first puts silicon at the forefront of server security

12 Jun 2017

HPE has unveiled a 'silicon root of trust' to strengthen firmware security in servers. The industry-first development features embedded silicon-based security into its next-generation ProLiant servers.

ISACA research found that more than 50% of security professionals reported at least one incident of malware-infected firmware last year. HPE says firmware attacks are currently one of the biggest threats facing enterprises and governments today.

To prevent future attacks, HPE developed what it calls the 'silicon root of trust', which is a link between custom HPE silicon and the HPE Integrated Lights Out (iLO) firmware. The link makes sure servers don't execute compromised firmware code.

According to HPE, building the firmware security directly on HPE silicon provides protection against attacks and also allows organisations to automatically recover the most essential firmware.

Patrick Moorhead, president of Moor Insights and Strategy, says that a firmware breach is difficult to detect and it can also do the most damage.

"Unfortunately, firmware is often overlooked in c-suite conversations about data center security, and cyber criminals are targeting this as a new attack surface,” he says.

HPE designed its silicon root of trust to fit security directly into the iLO chip. This creates an 'immutable' fingerprint in the silicon. Unless the firmware matches the silicon, the server will not boot up.

The silicon root of trust also includes encryption and breach detection technologies, complemented by HPE supply chain security and HPE Pointnext security assessment and protection services.

HPE says that because it has complete control over its own silicon chip and server firmware, it is the only one that can offer that particular type of security.

“While many servers have some level of hardware security already built-in, HPE is creating firmware security inextricably tied with its custom made silicon, to help customers protect against these malicious attacks," Moorhead adds.

The silicon root of trust is part of HPE's next-generation ProLiant Server portfolio, which will be available later this year.

Story image
AvePoint brings Salesforce Cloud Backup to channel partners
The product adds to the AvePoint suite of trusted Cloud Backup for Microsoft 365 and Dynamics 365 to provide managed service providers with backup and restore capabilities across multiple, popular SaaS providers.More
Story image
WatchGuard uncovers top cyber threat trends of Q4 2020
“The rise in sophisticated, evasive threat tactics last quarter and throughout 2020 showcases how vital it is to implement layered, end-to-end security protections."More
Story image
Why a more secure organisation is a collective responsibility
With vast volumes of data moving to the cloud, many IT professionals are frequently challenged to protect their enterprise environment, and there is a greater focus being placed on advancing cybersecurity strategies.More
Story image
Cybersecurity budgets still not keeping up with threats — report
Executive teams are failing to recognise the level of damage cyber-threats pose to organisations, according to Sophos — many of them taking a ‘conservative approach’ to cybersecurity expenditure.More
Story image
Imperva unveils new data security platform built for cloud
"The cloud has revolutionised IT, offering organisations a strategic opportunity to rapidly pursue new market initiatives and adapt their operations in the face of new business challenges."More
Story image
Tesserent to acquire Secure Logic's managed security services business
Secure Logic delivered an audited turnover of $9 million in FY 2020 and a $4.2 million EBITDA, with reportedly ‘strong’ earnings going into FY 2021.More