Subject: General Tech | September 8, 2014 - 12:52 PM | Jeremy Hellstrom
Tagged: IBM, Intel, txt, mcafee
Intel have been diligently working on their Trusted Execution Technology to provide security on the actual silicon and with their purchaser of McAfee this technology has quickly improved over the past year. IBM subsidiary Softlayer, who offer cloud storage, have announced that the will be implementing TXT along with the Intel Trusted Platform module to offer enhanced security on their servers. This should make them attractive to government and law enforcement agencies which utilize clouds storage as well as businesses that need to keep their customers data secure. They are not the first to consider TXT but are among the largest of vendors who are currently deploying servers that take advantage of the new security. Check out more at The Register.
"BIG BLUE IBM has announced that its Softlayer subsidiary will be the first cloud service to offer bare metal servers powered by Intel technology that provides monitoring and security down to the microchip level."
Here is some more Tech News from around the web:
Subject: Storage | July 22, 2014 - 04:02 PM | Jeremy Hellstrom
Tagged: Intel, ssd, Pro 2500, enterprise, encryption, mcafee
Intel has not offered many products which take advantage of their takeover of McAfee, now known as Intel Security but today's release of the Intel SSD Pro 2500 Series changes that. This family of SSDs will work with McAfee ePolicy Orchestrator to allow the automatic implementation of hardware-based 256-bit encryption on these drives in a similar manner to what Endpoint Encryption has done in the past. Since it sits on the hardware Intel claims no impact to the speed is caused by the on the fly encryption. If you use Intel Setup and Configuration Software with vPro you can even monitor the health of deployed drives. Check out Intel's page here and the PR below.
SANTA CLARA, Calif., July 22, 2014 – Intel Corporation today announced an addition to the Intel® Solid-State Drive (SSD) Professional Family: the Intel® SSD Pro 2500 Series. This new business-class SSD delivers lower total cost of ownership, security and manageability features, and blazing-fast SSD performance demanded by today’s business users.
Intel SSD Pro 2500 Series offers IT departments peace of mind with advanced security features and capabilities designed for businesses ranging from small companies through large IT-managed enterprises. Security and remote manageability features, combined with lower annual failure rates than hard disk drives (HDDs), help to reduce the need for resource-intensive deskside visits.
Managing data security is critical for businesses and a challenge for IT leaders. Data breaches, often a result of lost or stolen PCs, can cost a business nearly $50,000 in lost productivity, replacement, data recovery and legal costs.1 To help businesses mitigate the threat of such costly breaches, the Intel Pro 2500 Series SSDs are self-encrypting drives (SED) utilizing hardware-based 256-bit encryption to protect data without a loss of performance. Additionally, the new Intel drives feature the Trusted Computing Group’s OPAL 2.0* standard and are Microsoft eDrive* capable. These policy-based controls help to prevent data breaches and support crypto erase to repurpose the drive for reuse.
“The need to protect assets, keep an eye on the bottom line and ensure employees have the best tools is a challenge for IT departments,” said Rob Crooke, Intel corporate vice president and general manager of the Non-Volatile Memory Solutions Group. “The Intel SSD Pro 2500 Series is a well-rounded solution to help balance those often competing needs. Adding the Pro 2500 Series to the Intel SSD Professional Family delivers a powerful storage solution to help businesses of all sizes meet their critical IT needs.”
“The Intel SSD Pro 2500 Series is the second-generation OPAL-based client storage solution that helps IT departments protect their users’ data and also provides valuable features to reduce operational costs,” stated Candace Worley, senior vice president and general manager, Endpoint Security, McAfee*, part of Intel Security. “The Pro 2500 Series is a perfect companion to our data protection solutions, managed by McAfee ePolicy Orchestrator*, all working in concert to provide IT departments with data security, management and control, wherever their endpoints may be.”
In an environment with Intel® vPro™ Technology, with Intel® Setup and Configuration Software and leading security software, the Pro 2500 Series drives can be managed remotely allowing IT to monitor and report drive health as well as track assets and remedy faults. This remote manageability enforces IT policies to help prevent mishaps and simultaneously provides a great user experience. Embedded and Internet of Things applications can also take advantage of the remote manageability features to help limit the number of IT professionals needed to oversee devices. To assist in protecting user data and lower the total cost of ownership, applications such as ATMs and remote digital signage can be updated, monitored and managed remotely.
“Corporations of every size are facing the growing challenge of protecting sensitive data and ensuring compliance with a litany of data protection laws and regulations,” said Bill Solms, president and CEO of Wave Systems*. “The Intel SSD Pro 2500 Series offers a sound foundation for any data security program, incorporating hardware-level encryption without impacting drive performance. Wave’s on-premise and cloud-based management software complements the Intel SSD Pro 2500 by offering remote drive provisioning, automated password recovery and secure audit logs to document that encryption was in place should a laptop become lost or stolen.”
The Intel SSD Professional Family is part of the Intel® Stable Image Platform Program, including a 15-month availability of the components and drivers for compatibility and stability across a qualified IT image. This helps minimize IT qualification and deployment times. The Intel SSD Pro 2500 Series also features five advance power modes helping to balance performance and power to enable a longer battery life and provide a better mobile experience.
The Intel SSD Pro 2500 Series will be available in both 2.5-inch and M.2 form factors and in capacities ranging from 120GB to 480GB. The Intel SSD Pro 2500 Series is backed by a 5-year limited warranty and features a world-class annualized failure rate (AFR) well below 1 percent. The AFRs of other SSDs and HDDs can reach as high as 5 percent or more in mobile environments.
Subject: General Tech | May 7, 2013 - 03:16 PM | Jeremy Hellstrom
Tagged: stonesoft, security, purchase, mcafee, Intel
A small security firm called Stonesoft was acquired by Intel, or rather McAfee, for just under $400m. They provide not only software and services but actual network appliances which utilize their proprietary Stonesoft Security Engine to provide secure connectivity. This makes a lot of sense when you think back on Intel's statements when purchasing McAfee, they are not interested in only providing security at the software level but are interested in moving to the hardware level. You can find out a bit more at The Inquirer.
"SECURITY VENDOR McAfee has bought software security firm Stonesoft to add to its range of network security products.
McAfee, which is owned by Intel, is one of the biggest security vendors but has so far been focused on end-point products such as anti-virus and firewall software that runs on consumer PCs. Now the firm has made a move to go deeper into the network, buying security software vendor Stonesoft for $389m in cash."
Here is some more Tech News from around the web:
- Samsung switches on Knox for the Galaxy S4, availability depends on mobile operators @ The Inquirer
- YouTube channels at $1.99 per month could launch this week @ The Register
- Adobe kills Creative Suite – all future features online only @ The Register
- Wolf 15 Piece Watch Box Review @ NikKTech
Subject: General Tech | February 26, 2013 - 01:45 PM | Jeremy Hellstrom
Tagged: mcafee, security, RSA 2013, sandbox
McAfee has been showing off their stuff at RSA 2013 specifically the new heuristic malware detection capabilities which they will be using instead of their current malware signature database which has over 113 million core samples. That signifies a huge change for the antivirus company as it moves to real time monitoring of all the processes on your machine for suspicious activity instead of matching patterns directly. While this could lead to some interesting side effects for verification software such as you find in some games, McAfee claims 100% effectiveness against current rootkits on Intel hardware compatible with Deep Defender, though they did not give many specifics about that test to The Register.
That is not all they are up to, McAfee just purchased Validedge's sandboxing technology to allow them to watch malware as it arrives and infects a machine to allow them to study its patterns. Strangely, The Inquirer mentions that they will be recording the signature so it is possible that it is an exaggeration that they are completely abandoning their signature database altogether and will be using a hybrid database and heuristic monitoring. The first software using this new option will be available in the second half of this year. Also briefly mentioned in the story is a suggestion that McAfee will be able to repair infected computers automatically via the ePO Agent.
"Signature-based malware identification has been around since the dawn of the computer security industry, but McAfee has said it's dumping the system – or rather, adapting it – in an upgraded security suite which will (it claims) virtually eliminate susceptibility to botnets."
Here is some more Tech News from around the web:
- Altera signs up to use Intel's upcoming 14nm process node @ The Inquirer
- HP offloads WebOS to LG for use in televisions @ The Inquirer
- Internet Explorer 10 for Windows 7 @ [H]ard|OCP
- Samsung, Visa in pay-by-bonk tie up @ The Register
- Not so fast, BlackBerry. Now Samsung wants your tasty biz mobe pie @ The Register
- Hacking the International Space Station with a toothbrush @ Hack a Day
- Super single-photon source for quantum computers @ nanotechweb
Subject: General Tech | May 24, 2012 - 12:19 PM | Jeremy Hellstrom
Tagged: mcafee, Intel, cloud
Intel's purchase of AntiVirus vendor McAfee has been feeding rumours and speculation for about 10 months now and while we have plenty of buzzwords and a feeling that they are looking at securing Cloud Computing only recently have we seen anything concrete. The first product to give us insight into their actual plans has arrived on the market bearing an awkward name, McAfee Management for Optimized Virtual Environments AntiVirus. This is essentially antivirus and antimalware specifically designed to be used in virtualized server environments which are connected to and providing services to a large amount of geographically separate devices ... aka 'The Cloud". It is possible that they have a product which will be able to prevent the spread of an infection by leveraging the strictly partitioned nature of virtual servers and data stores, something that will be very important for anyone providing SaaS (Software as a Service) to clients.
The Register also points out that in order to fully benefit from this AV product you will need a relatively new Xeon for your servers to support Trusted Execution Technology and a Sandy/Ivy Bridge processor for client side machines. That means hardware upgrades which Intel's sales team would be more than happy to talk to you about.
"What Intel is planning is a cloud-to-desktop security strategy, mixing hardware and software features in a federated framework designed to make cloud computing safer, locking down the desktop and, coincidentally, giving IT managers another reason to specify Intel's systems during the next upgrade cycle."
Here is some more Tech News from around the web:
- Google 7-inch tablet PC to ship in June with initial volume of 600,000 units @ DigiTimes
- Building an x-ray machine and letting everything go to your head @ Hack a Day
- Boffins develop nanoscale vacuum tube running at .46 THz @ The Register
- Extreme Overclocking Session III ( EOS ) Event 2012 @ Madshrimps
- Win a Unique Custom Modified PC from Sapphire @ TechwareLabs
- Win a ZOTAC Z68-ITX WiFi Supreme motherboard @ Hardware.Info
Subject: General Tech | May 7, 2012 - 12:30 PM | Jeremy Hellstrom
Tagged: Intel, mcafee, cloud
It really has been almost a year and a half since Intel bought McAfee and we started speculating on what this would mean. It was a common hypothesis that Intel wanted to leverage the Trusted Execution Technology that exists in Xeon processors as well as a belief that there would be instruction sets in the Core architecture that could be used to make your machine more secure without sacrificing performance. That theory has proven true as Jason Waxman who is in charge of Intel's Cloud initiative spoke about the current and planned implementations of their hardware assisted antivirus. A new tool called McAfee Management for Optimized Virtual Environments AntiVirus will handle scans and updates for the server and service side and new additions to McAfee's ePO agent which expand its ability to secure networks and servers. The Register put together a generalized look at what we know so far and while we are still hoping to see more specifics from Intel soon it is certainly more interesting than the other McAfee story currently circulating.
"Jason Waxman, general manager of Intel's Cloud Infrastructure Group, said that over the last year or so he'd been inundated with questions about what Intel was going to do with McAfee since it lashed out $7.68bn for the security firm, during an industry-wide buying spree on cyber-security companies. Chipzilla's been intentionally quiet on the subject, but was now ready to talk he said."
Here is some more Tech News from around the web:
- Microsoft Creates Kinect-Like System Using Laptop Speaker & Microphone @ Slashdot
- The TR Podcast 111: Spandex, SLI, and a snap-together tablet
- Ubuntu 12.04 LTS ARMv7 Linux Performance Gains @ Phoronix
- Adobe Photoshop Lightroom 4 Review @ Techgage
- Sony Cyber-shot DSC-TX20 Review @ TechReviewSource
- Kingston HyperX Event Antwerp @ Madshrimps
- Tones OC Academy IV @ Madshrimps
Subject: General Tech | September 13, 2011 - 05:05 PM | Scott Michaud
Tagged: mcafee, Intel, idf 2011, idf
As the Intel Developer Forum commences we finally learn a little bit about what Intel is attempting to do with the acquisition of McAfee among other tidbits. Malware is one of the banes of computing existence. Information is valuable, security is hard, and most people do not know either. Antimalware software remains a line of defense between you and infections in the event that your first three lines of defense (patching known security vulnerabilities in software; limiting inbound connections and permissions; and common sense) fail to help. While no antimalware software is anywhere near perfect Intel believes that getting protection a little deeper in the hardware will do a little more to prevent previously unknown exploits.
Great Norton’s Ghost!
According to McAfee’s website, DeepSAFE is a platform for security software to see more of what is going on in the hardware around the Operating System itself. They are being very cagey about what technology is being utilized both on their site as well as their FAQ (pdf) which causes two problems: firstly, we do not know exactly what processors support or will support DeepSAFE; secondly, we do not know exactly what is being done. While this is more details than we knew previously there are still more than enough holes to fill before we know what this technology truly is capable of.
Subject: Editorial | July 20, 2011 - 06:10 PM | Jeremy Hellstrom
Tagged: vpro, TPM, speculation, security, mcafee, intel txt, Intel, infineon, amt
Not too long ago the tech world was buzzing with the news that Intel had aquired McAfee for $7.68 billion. This gave them the knowledge base to start thinking about putting antivirus technology directly onto their chips, which seemed far more likely than an Intel branded software antivirus product. When Intel CTO Justin Rattner started talking about technology that resembled the failed attempts at digital rights management, such as Microsoft's Palladium, or the Trusted Platform Module, aka TPM, a different idea was promoted with its own acronyms; Intel Active Management Technology (AMT) and Intel Trusted Execution Technology (Intel TXT). This theory was lent credence by the mention of Intel's vPro and a desire by Intel to move security to the top of their list of priorities. By integrating security software directly into vPro architecture, it might not even be necessary to place antivirus code directly on their hardware. Adding optimization to product architecture that Intel trusts absolutely, as they made it themselves, and the overall level of security on an Intel based virtual machine would be greatly increased.
Then Intel went and muddied the water with the $1.9 billion purchase of Infineon Technologies AG’s wireless business, which doesn't own manufacturing facilities but does own the intellectual property and patents for chips providing wireless communication. Suddenly some discarded theories about the purchase of McAfee seemed valid again. One possibility that was bandied about was the idea of Intel moving into ARM territory in the cell phone business. With Intel's new focus on low power chips, with Atom being the starting point, the idea of Intel moving into providing secure CPUs appropriate for cell phones and tablets became much more believable. With the current rise of viruses targeted at those mobile platforms and the vulnerabilities present in Android and Windows based phones having hardware based antivirus, or at least optimized hardware, makes a lot of sense.
It also differentiates them from ARM, who has more market experience making ultra low power chips but certainly does not own an antivirus vendor. The security concerns with cell phones and tablets will continue to increase at the same pace as the capabilities of the devices increase. Where once bluejacking was the biggest concern of a cell phone user, a smart phone user can browse the world wild web and expose themselves to all sorts of nastiness, including more than just the nastiness they intended to browse for. A hardware solution would leave more processing power for the user; running Norton 360 on a cell phone or tablet would chew up a lot of cycles.
Today those muddied waters were stirred up even more as Intel announced it is planning to buy Fulcrum Microsystems, maker of high end 10Gbps and 40Gbps ethernet switches. This purchase would support the theory decided before the purchase of Infineon's wireless group; that Intel is taking a serious look at a total TPM ecosystem. In order to truly trust your platform you need to do more than secure your endpoints. If your server is running AMT or Intel TXT, then you can be assured that any virtual machine running on it can be trusted. As well, if both the server and client are running processors capable of Intel's TPM (sounds so much better that DRM, eh?) again both machines can be considered trusted platforms.
That does not help with trusting data which has been transferred over a WAN, or in some cases even a LAN. Data transfer allows an attacker a means of entry, or at least a way of denying data transfer. With a trusted platform, any data which does not match what is expected by the receiving machine will be prevented from running, so a successful man in the middle attack might not allow remote code execution or privilege escalation but would certainly act as a DoS attack as the TPM client refuses to accept the incoming data. Once the routers and switches involved in the data transfer are secured with the exact same TPM specifications, the entire route is protected and can all be considered part of the same Trusted Platform. The network devices would reject any code injection attempted on the data during transfer, allowing data to flow freely inside a LAN as well as customized WANs.
Returning to the secure cell phone theory, we can now consider the possibility of a TPM compliant cell phone thanks to the theoretical integration of Intel processors into your phone and tablet. Now you would be able to include your mobile communications into your TPM ecosystem. Properly implemented that security and not only will you challenge ARM 's market share by out-securing them, you could topple RIM's share of the business market as a BlackBerry may be handy to the sales team but they are a nightmare for the IT/IS security team. Nothing is perfect but that would be a huge step towards defeating the current attack vectors that effect business systems. So far Intel is not saying much, so all we can do is speculate ... which is fun.