Story image

HPE's industry-first puts silicon at the forefront of server security

12 Jun 17

HPE has unveiled a 'silicon root of trust' to strengthen firmware security in servers. The industry-first development features embedded silicon-based security into its next-generation ProLiant servers.

ISACA research found that more than 50% of security professionals reported at least one incident of malware-infected firmware last year. HPE says firmware attacks are currently one of the biggest threats facing enterprises and governments today.

To prevent future attacks, HPE developed what it calls the 'silicon root of trust', which is a link between custom HPE silicon and the HPE Integrated Lights Out (iLO) firmware. The link makes sure servers don't execute compromised firmware code.

According to HPE, building the firmware security directly on HPE silicon provides protection against attacks and also allows organisations to automatically recover the most essential firmware.

Patrick Moorhead, president of Moor Insights and Strategy, says that a firmware breach is difficult to detect and it can also do the most damage.

"Unfortunately, firmware is often overlooked in c-suite conversations about data center security, and cyber criminals are targeting this as a new attack surface,” he says.

HPE designed its silicon root of trust to fit security directly into the iLO chip. This creates an 'immutable' fingerprint in the silicon. Unless the firmware matches the silicon, the server will not boot up.

The silicon root of trust also includes encryption and breach detection technologies, complemented by HPE supply chain security and HPE Pointnext security assessment and protection services.

HPE says that because it has complete control over its own silicon chip and server firmware, it is the only one that can offer that particular type of security.

“While many servers have some level of hardware security already built-in, HPE is creating firmware security inextricably tied with its custom made silicon, to help customers protect against these malicious attacks," Moorhead adds.

The silicon root of trust is part of HPE's next-generation ProLiant Server portfolio, which will be available later this year.

Will 2019 be the year of network evolution?
An A10 Networks exec talks 5G, software-defined networks, and the continuing evolution needed for a modern cloud environment.
ZTE takes the lead in the global race to 5G
ZTE took the lead in completing the IMT-2020 third phase 5G test for core network performance stability and security function.
IDC: Relevance is combining strategy, creativity and IT services
IDC reveals the Top 10 Asia/Pacific predictions to impact IT and business services sourcing in 2019 and beyond.
How IIoT is creating opportunities for RFID companies
The growing demands for automation and digitisation are creating considerable growth opportunities for RFID vendors.
Huawei founder publically denies spying allegations
“After all the evidence is made public, we will rely on the justice system.”
Malware downloader on the rise in Check Point’s latest Threat Index
Organisations continue to be targeted by cryptominers, despite an overall drop in value across all cryptocurrencies in 2018.
Exclusive: Why Australia’s IT industry needs to invest in SMBs
"With SMBs generating employment for over five million Australians, it comes as no surprise that they play a vital role in the nation’s economy."
IoT breaches: Nearly half of businesses still can’t detect them
The Internet of Thing’s (IoT’s) rapid rise to prominence may have compromised its security, if a new report from Gemalto is anything to go by.