Latest Thales e-Security News

  • Thales shows how your crypto systems can be trusted at InfoSecurity Europe 2014

    Release of third annual global survey by Thales and Ponemon Institute examining attitudes towards data protection, encryption and key management in the cloud

    April 24,2014

    Thales, a world leader in Critical Information Systems and Cybersecurity, will be showcasing its high assurance cryptographic solutions for protecting cloud, mobile payments, public key infrastructures (PKIs), big data and cybersecurity at this year’s InfoSecurity Europe, Earls Court, London 29 April – 1 May 2014. At the show Thales is releasing the third edition of its annual research report – Encryption in the Cloud. The study, produced in conjunction with the Ponemon Institute, is based on a survey of more than 4,000 business and IT managers from around the world regarding the use of encryption in the cloud.

    As organizations increasingly rely on cryptography as part of their data protection strategy and to protect their critical systems, the trustworthiness of these crypto systems becomes paramount. This is particularly relevant in light of recent concerns over back doors, poorly implemented crypto systems, and key finding attacks such as Heartbleed. The increasing scrutiny arising from privacy mandates and risk management initiatives expose the impact of weak key management systems and create pressure to adopt a proactive approach. Thales can help organizations re-assess and re-evaluate their crypto security and key management infrastructure and deliver solutions that ensure their integrity and trustworthiness.

    Thales will address the following critical topics at InfoSecurity Europe:

    Do you trust your path to the cloud?
    Strong encryption and key management are recognized as the most secure and effective way of protecting data in the cloud. In order for organizations that migrate sensitive and high-value data to the cloud need a high assurance, reliable key management solution to retain control of their keys, and therefore their data. The Thales portfolio protects critical data assets throughout their lifecycle – when in storage, passing over communications networks and while in use by business applications – all of which are vital aspects of a cloud security strategy.

     

    Are your payments systems ready to go mobile?
    The proliferation of mobile devices such as smartphones and tablets has dramatically expanded the payments ecosystem, creating new security challenges and new business models. Thales technology can help you incorporate mobile point-of-sale (mPOS) solutions as well as enabling secure mobile issuance and provisioning of payments credentials to NFC and other contactless devices coupled with host security for cloud based wallets and peer-to-peer payments.


    Is your PKI secure enough for your business applications?
    The number of applications in an enterprise that rely on a PKI for their basis of trust is ever increasing. Under strain to do more and more, does your PKI make the grade? It is of crucial importance that the chain of trust leading back the root certificate authority (CA) along with its signing keys is protected with the utmost security implemented using a hardware security module (HSM) such as Thales nShield to protect against both logical and physical attacks.

    Can you secure Big Data?
    Massive scale data collection and high-velocity decision making challenges traditional security models and forces an approach that is fundamentally data centric. Encryption infrastructure and access control systems protected by Thales key management solutions not only help protect sensitive data in big data analytical systems, but also ensure it remains accessible to meet your business needs.

    Have you stepped up to the cybersecurity challenge?
    Over the past decade cybersecurity threats have significantly increased. Attacks are now more frequent, severe and harder to detect and being able to prevent an attack and mitigate the impact of any compromise is a vital part of enabling your business to return to normal operations as quickly as possible.

    The Thales cybersecurity portfolio encompasses a range of technologies and solutions designed to help you fully understand a cyber-threat: reduce your cyber-risk, detect attacks in real time enabling deployment of rapid counter measures, or in the worst case scenario of an attack, offer a fast and direct solution to the issue.

    Enterprise encryption: Where are you on the maturity curve?
    Tuesday 29 April, 13.20-13.45, InfoSecurity Europe Business Strategy Theatre
    Hear Richard Moulds, vice president strategy, Thales e-Security speak about global encryption trends, highlighting deployment challenges, budgets, corporate ownership and the role of encryption in cloud computing – enabling attendees to make informed decisions on encryption and key management as they move up the encryption maturity curve.

    Visit Thales at stand F30, InfoSecurity Europe 2014, Earls Court, London, 29 April – 1 May 2014.

    For industry insight and views on the latest key management trends check out our blog www.thales-esecurity.com/blogs


  • WidePoint’s ORC Provides Federal Grade Secured Cloud Services with Thales Hardware Security Modules

    March 18,2014

    Thales, leader in information systems and communications security, announces that Operational Research Consultants, Inc. (ORC), a subsidiary of WidePoint Corporation (NYSE Mkt: WYY) and pioneer in Federal identity management, has deployed Thales nShield hardware security modules (HSMs) to provide high levels of assurance for Federal cloud services and prove that the cloud really can be as safe, or even safer, than on-premise deployments – even for organizations as security-focused as the U.S. Federal Government.

    The ORC PIVotal™ ID cloud-based federated identity solution uses Thales nShield HSMs to underpin the strong identity credentials that are trusted across the federal government as well as being federated globally. Thales HSMs are designed specifically to protect the critical root and issuing certificate authority keys that form the basis of trust in all modern PKIs, and are of critical importance in the overall assurance level of the system and when meeting stringent security requirements such as those demanded by NIST.

    Daniel Turissini,  CTO of WidePoint and Founder of ORC, Inc., a WidePoint company, said:
    “In our line of work, creating trusted, compliant credentials is often a matter of national security. We needed a solution that delivers high assurance and absolute trust, enabling secure transactions for U.S. Federal Agencies (Civilian and Defense), their employees, the global contracting community, trading partners, Veterans and citizens who need to conduct business with any facet of the government. Thales HSMs offer the most cost-effective way to establish the appropriate levels of physical and logical controls where the security offered by software-based cryptography would be considered to be inadequate. The Thales nShield family of HSMs offers superior protection and cryptographic acceleration capabilities as well as the flexibility and scalability to protect and manage root keys and all subordinate keys within a secure cloud service infrastructure.”


    Cindy Provin, president Thales e-Security Inc. said:
    “We are pleased to have worked with ORC in providing federal grade secured cloud services for their customers.  For many organizations thinking about moving sensitive data to the cloud, both government and enterprise, security issues remain a significant concern. By integrating the Thales nShield HSM to your Public Key Infrastructure, you are deploying a high assurance, independently certified, tamper-resistant device that is used to secure the most sensitive keys and business processes within governments and organizations around the world.”

    Click here to read the case study

    About WidePoint and ORC

    WidePoint (NYSE Mkt: WYY) is a leading provider of secure, cloud-delivered, enterprise-wide mobile and information technology-based solutions that can enable enterprises and agencies to deploy fully compliant IT services in accordance with government mandated regulations and advanced system requirements. ORC, a WidePoint company, is a trusted partner to the U.S. Federal Government, delivering information security solutions to government and enterprise customers, ensuring the fully compliant and trusted exchange and assurance of information. For more information, visit www.widepoint.com


  • Thales keyAuthority Recognized as Best Encryption Product in 2014 InfoSecurity Products Guide Global Excellence Awards

    February 25,2014

    Thales, leader in information systems and communications security, announces that InfoSecurity Products Guide has recognized Thales keyAuthority® as Best Encryption Product in its 2014 Global Excellence Awards. The prestigious award recognizes Thales as a global leader in the IT security industry with advanced, ground-breaking data protection solutions.

    Enterprises today understand the importance of cryptography to ensure the security of critical data – both on premise and in the cloud. However this creates significant key management challenges, particularly as the number of applications and devices, often from different vendors, increases. To combat complexity, unnecessary operational costs and to ease compliance, valuable operational efficiencies can be gained by centralizing and automating key management. The value of separating key management tasks from the applications that use the keys is further increased in virtualized and cloud environments, where organizations can retain in-house control of keys and still take advantage of cloud-based encryption and data storage. 

      • keyAuthority is a high assurance appliance that provides centralized key management to lower the risk of security breaches and facilitate compliance with stringent regulations and policies while also ensuring that critical data remains available to the organization. 
      • keyAuthority is a security-hardened appliance that manages encryption keys on behalf of multiple classes of encryption devices, providing a single, unified key management system to achieve a consistent security policy, simplified administration, auditing and economies of scale.
      • keyAuthority delivers market-proven enterprise capabilities, such as the automation of key lifecycle management controls, high scalability, redundancy, support for multi-tenant environments and sophisticated administrative role separation and key segregation.
      • keyAuthority offers the broadest and most complete support for the latest Key Management Interoperability Protocol (KMIP) version 1.2 developed by the OASIS standards body, providing KMIP-enabled interoperability for encryption-enabled products from leading vendors including Brocade and Quantum.
      • Delivered in a tamper-resistant and tamper-evident hardware platform certified to the stringent FIPS 140-2 Level 3 standard for the entire chassis, keyAuthority offers long-term reliable protection of keys on behalf of an organization’s most critical applications and sensitive data.
    Cindy Provin, president, Thales e-Security, Inc., says: 
    “Thales keyAuthority is deployed in some of the most demanding environments, including financial services and government, where high levels of assurance and reliability are critical.  Building on our history of developing trusted hardware security modules (HSMs) and key management solutions, Thales is ideally positioned to satisfy partner and customer requirements for key management that ultimately supports the entire organization. This award further recognizes our commitment to delivering innovative and high quality data protection solutions that enable our customers to protect their most valuable assets.  We are pleased and honored to receive such an award.”

    Visit Thales at booth #909 South Expo, RSA Conference, Moscone Center, San Francisco, February 24-28, 2014

    See demonstrations of Thales keyAuthority in the OASIS KMIP interoperability showcase booth #1909 South Expo.

    Supporting Resources:
    For more information on keyAuthority, visit: http://www.thales-esecurity.com/products-and-services/products-and-services/key-management-systems/keyauthority

    About Thales e-Security
    Thales e-Security is a leading global provider of data encryption and cyber security solutions to the financial services, high technology, manufacturing, government and technology sectors.  With a 40-year track record of protecting corporate and government information, Thales solutions are used by four of the five largest energy and aerospace companies, 22 NATO countries, and secure more than 80 percent of worldwide payment transactions.  Thales e-Security has offices in Australia, France, Hong Kong, Norway, United States and the United Kingdom. 

    About Thales
    Thales is a global technology leader for the Aerospace & Transportation and the Defence & Security markets. In 2013, the company generated revenues of €14.2 billion ($18.3 billion) with 65,000 employees in 56 countries. With its 25,000 engineers and researchers, Thales has a unique capability to design, develop and deploy equipment, systems and services that meet the most complex security requirements. Thales has an exceptional international footprint, with operations around the world working with customers and local partners. www.thalesgroup.com

    Positioned as a value-added systems integrator, equipment supplier and service provider, Thales is one of Europe’s leading players in the security market. The Group’s security teams work with government agencies, local authorities and enterprise customers to develop and deploy integrated, resilient solutions to protect citizens, sensitive data and critical infrastructure. 

    Drawing on its strong cryptographic capabilities, Thales is one of the world leaders in cybersecurity products and solutions for critical state and military infrastructures, satellite networks and industrial and financial companies. With a presence throughout the entire security chain, Thales offers a comprehensive range of services and solutions ranging from security consulting, intrusion detection and architecture design to system certification, development and through-life management of products and services, and security supervision with Security Operation Centres in France and the United Kingdom.

    Contact: 
    Dorothée Bonneil                                                   Liz Harris                                            
    Thales Media Relations – Security                      Thales e-Security Media Relations
    +33 (0)1 57 77 90 89                                            +44 (0)1223 723612
    dorothee.bonneil@thalesgroup.com                    liz.harris@thales-esecurity.com            


  • Thales announces support for F5 Synthesis Architecture

    F5 BIG-IP support for Thales hardware security modules offers customers highest levels of security and reduces risk

    February 24,2014

    Thales, leader in information systems and communications security announces F5’s support for Thales nShield hardware security modules (HSMs) through F5 Synthesis’ High Performance Services Fabric. F5’s support for the Thales nShield hardware security module, within the BIG-IP Application Delivery Controller (ADC), offers security-conscious customers an additional layer of security for their SSL keys to comply with corporate security requirements and government mandates as they encrypt their network and application traffic.

    Any device handling SSL encrypted traffic is a point of risk within a network infrastructure, representing a target for hackers and cyber-criminals. Customers are therefore looking for solutions that provide high levels of protection for the cryptographic keys that are stored within each device.

    Thales nShield HSMs provide certified tamper-resistant cryptographic key generation and management and integrate seamlessly with F5 BIG-IP ADC. By ensuring the cryptographic keys and certificates are used only for their authorized purposes, operational risk is reduced. The robust key management, storage and redundancy features offered by nShield guarantee availability of critical keys, and increase the service velocity to support the increasingly demanding transaction rates of the BIG-IP ADC.

    Deploying a Thales nShield HSM with an F5 BIG-IP ADC delivers the following benefits:

      • Strong isolation of key material and crypto processes from host environment
      • Anti-tamper techniques for physical protection
      • Strong authentication for administrators
      • Strongly segregated administration domains
      • Strongly enforced dual controls for mutual supervision
      • High integrity random number generation
      • Processing offload to boost capacity
      • SSL performance and intelligence

    Siva Mandalam, Senior Director, Product Management, F5 Networks says:
    “Organizations looking to deploy applications in the cloud are often impeded by corporate requirements around security, compliance and performance. With the F5 Synthesis architecture, application services can be deployed in cloud environments and managed centrally alongside services deployed in the data center, enabling consistent deployment and enforcement of the policies governing security and performance. F5’s support for the Thales nShield HSMs provides the highest level of physical protection for cryptographic keys, enabling organizations to establish and prove compliance with the latest government legislation and security frameworks.”

    Richard Moulds, Vice President Strategy, Thales e-Security says:
    “As organizations increasingly rely on cryptography as part of their data protection strategy and to protect their application delivery systems, the trustworthiness of these crypto systems becomes paramount. This is particularly relevant in light of recent concerns over back doors, poorly implemented crypto systems, out of date algorithms, weak key management systems and the increasing burdens arising from privacy mandates. F5 BIG-IP products have leveraged Thales hardware security and key management technology for many years. This latest integration with F5’s Synthesis High Performance Services Fabric allows F5 customers to take advantage of best-in-class cryptographic hardware protection and key management, adding a further layer of security and reducing their operational risk”

    Visit Thales at booth #909 South Expo, RSA Conference, Moscone Center, San Francisco, February 24-28, 2014

    See demonstrations of Thales keyAuthority in the OASIS KMIP interoperability showcase booth #1909 South Expo.

    For industry insight and views on the latest key management trends check out our blog www.thales-esecurity.com/blogs

    Follow Thales e-Security on Twitter @Thalesesecurity, LinkedIn, Facebook and YouTube

    >
  • Thales announces PKI consultancy services

    Assisting customers design, deploy and manage world-class public key infrastructures protected by Thales hardware security modules

    February 18,2014

    Thales, leader in information systems and communications security, announces a public key infrastructure (PKI) consultancy service, designed to take risk and cost out of deploying, upgrading or refreshing an organization’s self-managed PKI.

    Public key infrastructures are a critical piece of almost every IT infrastructure, helping establish the identity of data, people, devices and services. The number of applications in an enterprise that rely on a PKI for their basis of trust is ever increasing. A PKI plays a vital role in enabling organizations to implement, for example, an enterprise ‘bring your own device’ (BYOD) strategy, certificate and key injection into devices such as set top boxes, mobile phones and printers, and feature enablement for cars, construction equipment, and other ‘intelligent’ high value assets. 

    Thales Advanced Solutions Group (ASG) assists organizations in the design and deployment of self-managed PKIs customized to meet their specific needs. Working predominantly with Microsoft Active Directory Certificate Services, but also with open source and other applications, Thales offers customers expert advice and assistance together with a range of services – from a turnkey solution through specialized components of a customer driven PKI implementation. 

    Thales bases its PKI practice on the deployment of hardware security modules (HSMs). The use of HSMs to protect both root and issuing certificate authority (CA) private keys is an industry accepted best practice. It is of crucial importance that the chain of trust leading back to the root CA along with its signing keys is protected with the utmost security, implemented using an HSM to protect against both logical and physical attacks. The higher the value of the applications that depend on a PKI, the more critical it is to protect that PKI with an HSM. The Thales nShield family of high assurance HSMs are designed specifically to protect the private keys that form the basis of trust in all modern PKIs. Thales PKI services are designed to assist its customers in designing, deploying and managing world class PKIs that utilize Thales HSMs to protect their root of trust. 

    Peter DiToro, Vice President Customer Services at Thales e-Security says:
    "Recent concerns over back doors, poorly implemented crypto systems, out of date algorithms and weak key management systems have led organizations to re-assess and re-evaluate their security infrastructure, and particularly their PKIs as they come under strain to do more. Planning, documenting, implementing and maintaining a PKI is a specialist skill – and it’s rare. The Thales ASG team have decades of experience, know-how and talent in deploying, refreshing and upgrading PKIs, taking risk and cost out of the processes of planning and implementing a self-managed PKI."

    Thales PKI Consultancy Services is currently available in North America. Click here to learn more.

    Read how Thales PKI Consultancy Services helped these companies implement their PKI:

    Polycom

    QuoVadis

    Finland e-Passport

    Fortune 500 utility company

    For industry insight and views on the latest key management trends check out our blog www.thales-esecurity.com/blogs  

  • Thales and Ponemon Institute study shows the use of encryption increasing and key management emerging as a prominent pain point

    February 11,2014

    Thales, leader in information systems and communications security, announces the publication of its latest 2013 Global Encryption Trends Study. The report, based on independent research by the Ponemon Institute and sponsored by Thales, reveals that use of encryption continues to grow in response to consumer concerns, privacy compliance regulations and on-going cyber-attacks and yet there are still major challenges in executing data encryption policy.

    More than 4,800 business and IT managers were surveyed in the US, UK, Germany, France, Australia, Japan, Brazil and for the first time this year Russia, examining global encryption trends and regional differences in encryption usage. Results from the Russian survey showed adoption of encryption in the region to be very much in line with the rest of the countries surveyed. The report is now in its ninth year since its launch in 2005. 

    News facts:
      • Steady increase in the deployment of encryption with 35% of organizations having an enterprise wide encryption strategy
      • Most organizations deploy encryption to lessen the impact of data breaches
      • The number one perceived threat to sensitive data is employee mistakes rather than external attack
      • Two biggest challenges faced by organizations executing a data encryption policy are knowing where sensitive data resides and managing the actual technology
      • Key management identified as a major issue by more than half of organizations
      • Organizations with the highest security posture are now three times more likely to have a formal encryption strategy than those with the lowest security posture

    The results of the study show there has been a steady increase in the deployment of encryption solutions used by organizations over the past nine years, with 35% of organizations now having an encryption strategy applied consistently across the entire enterprise compared with 29% last year.  The survey also indicated that only 14% of organizations surveyed do not have any encryption strategy compared with 22% last year.

    For the first time the primary driver for deploying encryption in most organizations is to lessen the impact of data breaches, whereas in previous years the primary concern was protecting the organization’s brand or reputation. Of those organizations that believe they have an obligation to disclose data breaches nearly half believe that encrypting their data provides a safe harbour that avoids the need to disclose that the actual breach occurred. The fastest growing reason as to why organizations are deploying encryption is to ensure they meet their commitments to their customers’ privacy with 42% of organizations focussing on their customer’s interests rather than for their own benefit, which has increased by 5% compared with last year.

    The number one perceived threat to the exposure of sensitive or confidential data remains employee mistakes, according to 27% of respondents. When employee mistakes are combined with accidental system or process malfunctions, concerns over inadvertent exposure outweigh concerns over actual malicious attacks by more than 2 to1. Furthermore, forced disclosures triggered by e-discovery requests now represent the second highest perceived threat to the loss of sensitive data.

    When asked about where encryption is used, organizations ranked backup tapes and databases as most important followed by network encryption and laptop encryption. Cloud encryption had a relatively low ranking compared with other encryption use cases ranking outside the top 10.

    The two biggest challenges facing organizations executing a data encryption policy were discovering where sensitive data actually resides, reported by 61% of respondents, and the ability to deploy encryption technology effectively, reported by 50% of respondents. Key management was identified as a major issue with more than half of organizations surveyed rating the overall challenge associated with management of keys or certificates more than 7 on a scale of 1-10 (10 being highest) and 30% of organizations rated the challenge at 9 or 10. Whilst three quarters of organizations identified key management as a formal discipline within their organization, more than 70% of those organizations failed to allocate dedicated staff or tools to the task of managing keys.  

    The Key Management Interoperability Protocol (KMIP) standard that allows organizations to deploy centralized key management systems that span multiple use cases and equipment vendors, has already established a relatively high level of awareness among IT and IT security practitioners. KMIP is perceived to be of increasing importance and is expected to contribute to encryption and key management strategies specifically around cloud, storage and application-level encryption. More than half of those surveyed said that the KMIP standard was important in cloud encryption compared with 42% last year.

    Hardware security modules (HSMs) are increasingly considered a critical component of a key management strategy. These devices are used to protect critical data processing activities and high value keys and can be used to strongly enforce security polices and access controls.

    Dr Larry Ponemon, chairman and founder of The Ponemon Institute, says:

    “Encryption usage continues to be a clear indicator of a strong security posture but there appears to be emerging evidence that concerns over key management are becoming a barrier to its more widespread adoption. For the first time in this study we drilled down into the issue of key management and found it emerging as a huge operational challenge. But questions are and should be asked about the broader topics of policy issues and choice of encryption algorithms – especially in the light of recent concerns over back doors, poorly implemented crypto systems and weak key management systems.”

    Richard Moulds, vice president strategy at Thales e-Security says:

    “Whilst key management may be emerging as a barrier to encryption deployment, it is not a new issue. The challenges associated with key management have already been addressed in heavily regulated industries such as payments processing, where best practices are well proven and could translate easily to a variety of other verticals. With more than 40 years’ experience providing key management solutions. Thales is ideally positioned to help organizations re-assess and re-evaluate their crypto security and key management infrastructure and deliver solutions that ensure their integrity and trustworthiness.”

    Download your copy of the new Global Encryption Trends Study 

    Visit Thales at booth #909, RSA Conference, Moscone Center, San Francisco, February 24-28, 2014.

    See demonstrations of Thales keyAuthority in the OASIS KMIP interoperability showcase booth #1909

    For industry insight and view on the latest key management trends check out our blog at www.thales-esecurity.com/blog 

    Follow Thales e-Security on Twitter @Thalesesecurity, LinkedIn, Facebook and YouTube

    About the Ponemon Institute 
    The Ponemon Institute© is dedicated to advancing responsible information and privacy management practices in business and government.  To achieve this objective, the Institute conducts independent research, educates leaders from the private and public sectors and verifies the privacy and data protection practices of organizations in a variety of industries.

    About Thales e-Security
    Thales e-Security is a leading global provider of data encryption and cyber security solutions to the financial services, high technology manufacturing, government and technology sectors.  With a 40-year track record of protecting corporate and government information, Thales solutions are used by four of the five largest energy and aerospace companies, 22 NATO countries, and they secure more than 80 percent of worldwide payment transactions.  Thales e-Security has offices in Australia, France, Hong Kong, Norway, United States and the United Kingdom. www.thales-esecurity.com  

    About Thales
    Thales is a global technology leader for the Aerospace & Transportation and the Defence & Security markets. In 2012, the company generated revenues of €14.2 billion ($18.3 billion) with 65,000 employees in 56 countries. With its 25,000 engineers and researchers, Thales has a unique capability to design, develop and deploy equipment, systems and services that meet the most complex security requirements. Thales has an exceptional international footprint, with operations around the world working with customers and local partners. www.thalesgroup.com
     
    Positioned as a value-added systems integrator, equipment supplier and service provider, Thales is one of Europe’s leading players in the security market. The Group’s security teams work with government agencies, local authorities and enterprise customers to develop and deploy integrated, resilient solutions to protect citizens, sensitive data and critical infrastructure. 

    Drawing on its strong cryptographic capabilities, Thales is one of the world leaders in cybersecurity products and solutions for critical state and military infrastructures, satellite networks and industrial and financial companies. With a presence throughout the entire security chain, Thales offers a comprehensive range of services and solutions ranging from security consulting, intrusion detection and architecture design to system certification, development and through-life management of products and services, and security supervision with Security Operation Centres in France and the United Kingdom.


    Contact:
    Dorothée Bonneil                                                   Liz Harris                                                   

    Thales Media Relations – Security                      Thales e-Security Media Relations

    +33 (0)1 57 77 90 89                                          +44 (0)1223 723612

    dorothee.bonneil@thalesgroup.com                   liz.harris@thales-esecurity.com             

MORE PRESS RELEASES