Device Security Bulletin | Issue 76

Device Security Bulletin | Issue 76

Security Highlight: Understanding Fault Injection in Neural Networks for Edge Devices

In the realm of device security, ensuring the robustness of neural networks is becoming increasingly critical. AI technologies now permeate various aspects of our daily lives, from biometric authorization to autonomous vehicles, and are increasingly deployed on edge devices. This raises a pertinent question: what about hardware attacks on these devices, specifically fault injection attacks?

Read the full security highlight here


The Latest Updates

Keysight and NXP Set New Standard for Automotive Security with World’s First Digital Key Applet

Keysight Technologies , Inc. (NYSE: KEYS), device security research lab, Riscure Security Solutions, has successfully completed the first Car Connectivity Consortium (CCC) Digital Key Applet (DKA) certification for NXP? Semiconductors, a leading provider of secure connectivity solutions for embedded applications. The two companies worked together to evaluate and certify NXP’s automotive Digital Key solution, helping further the development of this new standard.

Read the full announcement here.


Riscure Expands its Mobile Payment Testing Services Range with Visa Accreditation for Token Solution

Riscure announces that it has been accredited by Visa to perform the security evaluations of Device Binding in Cloud Token Framework (CTF). This accreditation allows Riscure to provide comprehensive security assessments for Android and iOS devices, ensuring they meet Visa’s security requirements for mobile payment applications.

Read more on our website.


New webinar: Riscure Side Channel - Post-Quantum Cryptography Edition

On August 29th, at 5pm CET/11am EST we will host the next edition of the Riscure Side Channel webinar series. This session will focus on the advancements in Post-Quantum Cryptography (PQC), a crucial field in device security.

Register to attend Register to attend here.

Every two months we discuss the latest events in device security. This includes notable attacks, research and product updates, both within Riscure and externally. We choose the topics that are important for our customers and also invite you to ask your own questions.

Did you know? On Side Channel by Riscure, you get access to all our content after a one-time registration. Check out this page to view all previous editions of the Side Channel webinar.


Riscure Side Channel: Automotive Edition - Watch on-demand now!

In case you missed it - we hosted our Side Channel Automotive Edition on July 24th, and the recording is now available to all registrants.

Register to watch the recording of this webinar here.


Riscure Achieves TISAX Level 3

Riscure announces that it has successfully completed the TISAX Level 3 assessment. TISAX (Trusted Information Security Assessment Exchange) is a dedicated assessment and exchange standard for information security in the automotive industry, focusing on the protection of vehicles, components, and aftermarket products from cyber threats.

Read the full announcement here.


Understanding the FIPS 140-3 Requirements for Cryptographic Devices

This blog post discusses the updated Federal Information Processing Standard (FIPS) 140-3 for cryptographic devices, highlighting its new security requirements and levels, the challenges in transitioning from FIPS 140-2, and the critical need for regular security assessments to stay ahead of evolving cyber threats.

Continue reading on our website.


Don’t Get Knocked Off the Curve: An Overview of Fault Injection Attacks on Elliptic Curve Cryptosystems

Elliptic curve cryptography (ECC) is ubiquitous and used to secure everything from internet traffic to embedded devices. However, not all elliptic curves are cryptographically secure. In this new whitepaper, we provide an overview of real-world fault injection attacks which target Elliptic Curve Digital Signature Algorithm (ECDSA) and Elliptic Curve Diffie-Hellman (ECDH).

Access this publication here.


My Internship at Riscure: Mans van Someren

Meet Mans van Someren , who has recently completed his internship with us at Riscure. His innovative work in automotive security is an inspiring example of the kind of cutting-edge projects our interns get to explore.

Read his story here.


Gaming Consoles as a Frontier in Hardware Attacks

Historically, gaming has been attracting the best hacker talent. These devices are usually well protected against basic attacks. When their security is finally circumvented, quite often it is a result of a sophisticated attack on hardware.

In this blog post, we collected a number of notable examples of hardware exploits in gaming consoles over the years.

Read the full blog post here.


MEET WITH RISCURE DURING THESE UPCOMING EVENTS

ARM Partner Meeting (APM)

On August 5-7, Pascal van Gimst will attend the annual ARM Partner Meeting, which is taking place in Cambridge, United Kingdom. He will also be part of the panel discussion of the event. Reach out to Pascal via [email protected] to schedule a meeting during the event. We hope to see you there!

If you would like to connect with our team at any of the above events, please don't hesitate to get in touch with us via [email protected].

Check out this page for all upcoming events where you can meet with us.


MORE ABOUT RISCURE

Become a part of our team!

Riscure is always looking for talented professionals to join our dynamic team and to help us further develop our testing and knowledge products! When joining Riscure, you join one of the leading companies in the industry and a fun and exciting team of professionals to work with.

Find out more about what it is like working at Riscure on our website. We have open vacancies in different departments and within various positions. Are you ready to join our team?

Check out the full list of current vacancies


Join us on Twitter and LinkedIn

In addition to monthly newsletters, we regularly share updates on our social networks. If you are not subscribed already, check out our accounts on Twitter and LinkedIn.



要查看或添加评论,请登录

Keysight Device Security Testing的更多文章

社区洞察

其他会员也浏览了