Trusted Computing Group

In a new interview published this week by by SecurityStockwatch.com, Chris Daly of TCG member GDC4 Systems talks about the good stuff his company is doing to help secure the nation's critical computing infrastructure, systems and communications.

Daly notes the firm's support for the NSA HIgh Assurance Program (HAP), saying "...I would also like to highlight our collaborative work in the area of trusted computing technologies. Specifically, as part of the NSA High Assurance Platform (HAP) Program, we are leading the effort to transition HAP trusted computing technologies to an open source model. The focus of the HAP contract has always been to provide reference implementations of TCG-based capabilities at various stages of development in order to encourage the use of trusted computing technology by commercial vendors."

Noting the increasing interest in mobile devices for many uses, Daly says "Securing mobile communications and mobile computing platforms are the hottest security topics today...Mobile computing has also introduced new ways to work and communicate. For example, app stores provide an amazing array of new capabilities for use on-the-fly. Other new computing and communications methods include context-aware mobile computing, self-forming mobile area networks (MANETs), Near Field Communications (NFC), adoption of WiMAX and mobile money. From a security perspective, all of these new capabilities require refinements of trust systems, protection mechanisms, and security protocols.

The good news is that mobile device management and security providers are working hard to fill the gaps, however exploit mitigation strategies still lag in the mobile space. For example, patching discovered vulnerabilities for mobile devices still takes too long. Greater adoption of existing standards and best practices is also needed. Groups and forums such as the Trusted Computing Group, the Global Platform organization, ISO TC 204 and the Mobey Forum offer trust and security specifications and best practice options for securing mobile platforms and communication."

TCG members worldwide are participating in the group's new Trusted Mobility Solutions Work Group and TCG has long recognized the key role of trust in mobile systems with its Mobile Trusted Module specification.

Read the entire interview here.