#CLM--AppViewX, the leader in automated machine identity management (MIM) and application infrastructure security, today announced it is a contributor to the National Institute of Standards and Techno...
New guide presents models and recommendations to help enterprises securely adopt modern internet security protocols
NEW YORK: #CLM--AppViewX, the leader in automated machine identity management (MIM) and application infrastructure security, today announced it is a contributor to the National Institute of Standards and Technology's (NIST) Special Publication (SP) 1800-37B, Addressing Visibility Challenges with TLS 1.3 within the Enterprise, released today on overcoming the visibility challenges posed by the adoption of the Transport Layer Security (TLS) protocol version 1.3 in enterprise environments.
The NIST preliminary practice guide for understanding what types of key management-based solutions can be used for achieving TLS 1.3 visibility is available free of charge here.
TLS 1.3 enhances network traffic security to ensure that end-to-end communications are encrypted, prevent eavesdropping and man-in-the-middle attacks, and protect the contents of communications – a feature known as forward secrecy. However, the security improvements in TLS 1.3 create challenges for enterprises that rely on passive decryption techniques for visibility into their TLS traffic. This visibility is essential for enterprises to meet cybersecurity, operational, and regulatory requirements.
To help organizations faced with the dilemma of choosing between the outdated TLS 1.2 and the more secure TLS 1.3, which complicates internal traffic visibility, the National Cybersecurity Center of Excellence (NCCoE) initiated a project in collaboration with technology providers like AppViewX and enterprise customers. This project presents options for maintaining visibility within the TLS 1.3 protocol by offering standards-compliant architectural models for real-time and post-facto systems monitoring and analytics capabilities within enterprises. AppViewX contributed its technical expertise, and first hand experience working with enterprise customers migrating to TLS 1.3, to the SP 1800-37B report.
“This engagement with the National Cybersecurity Center of Excellence and our participation in the SP 1800-37B report reflects our dedication to helping organizations advance digital certificate management, streamline the adoption of modern protocols like TLS 1.3 and automate certificate lifecycle management,” said Murali Palamisamy, Chief Solutions Officer at AppViewX. “One of the NIST’s report key recommendations is for enterprises to implement a central key governance platform. AppViewX provides key governance and certificate management solutions to enable comprehensive certificate discovery, visibility into outdated cryptographic algorithms, and an automated path to crypto-agility.”
This project builds upon the NCCoE’s previous project, “TLS Server Certificate Management,” which showed organizations how to centrally monitor and manage their TLS certificates. This latest project will give security and IT professionals the tools they need to gain more visibility into the information being exchanged on their servers and to help them fully adopt TLS 1.3 in their private data centers and in hybrid cloud environments.
The AppViewX SaaS-delivered Digital Trust Platform is used by Fortune-ranked organizations across financial services, banking, healthcare, oil and gas, manufacturing, and high tech to reduce cybersecurity risk and meet security compliance requirements. AppViewX CERT+ is a certificate lifecycle management (CLM) solution that automates the discovery, monitoring, analysis, provisioning and orchestration of digital certificates, including SSL/TLS, client and code signing certificates, to eliminate cloud service outages and prevent damaging security breaches. Delivered on-premises, in the cloud or as a service, AppViewX CERT+ is ready-to-consume and highly scalable to meet any organization’s identity governance and cybersecurity strategy.
NIST does not evaluate commercial products under this consortium and does not endorse any product or service used. Additional information on this consortium can be found at https://www.nccoe.nist.gov/addressing-visibility-challenges-tls-13.
About AppViewX
AppViewX is trusted by the world’s leading organizations to reduce risk, ensure compliance, and increase visibility through automated machine identity management and application infrastructure security and orchestration. The AppViewX platform provides complete certificate lifecycle management and PKI-as-a-Service using streamlined workflows to prevent outages, reduce security incidents and enable crypto-agility.
Fortune 1000 companies, including six of the top ten global commercial banks, five of the top ten global media companies, and five of the top ten managed healthcare providers rely on AppViewX to automate NetOps, SecOps, and DevOps. AppViewX is headquartered in New York with offices in the U.K., Australia and three development centers of excellence in India. For more information, visit https://www.appviewx.com and follow us on LinkedIn and Twitter.
About the National Cybersecurity Center of Excellence
The NCCoE, a part of NIST, is a collaborative hub where industry organizations, government agencies, and academic institutions work together to address businesses’ most pressing cybersecurity issues. This public-private partnership enables creation of practical cybersecurity solutions for specific industries, as well as for broad, cross-sector technology challenges. Through consortia under CRADAs, including technology partners—from Fortune 50 market leaders to smaller companies specializing in information technology and operational technology security—the NCCoE applies standards and recommended practices to develop modular, adaptable example cybersecurity solutions by using commercially available technology. The NCCoE documents these example solutions in the NIST Special Publication 1800 series, which maps capabilities to the NIST Cybersecurity Framework and details the steps needed for another entity to re-create the example solution. The NCCoE was established in 2012 by NIST in partnership with the State of Maryland and Montgomery County, Maryland. Information is available at https://www.nccoe.nist.gov.
Fonte: Business Wire
Scheduled for October, the world's largest startup event will bring together more than 2,000 exhibitors in Dubai, UAE
The Italian IoT company is in the US for the second phase of CALL4INNOVIT
The Italian company partners with MainStreaming for high-performance, energy-efficient video streaming
Software vendors developing vertical solutions against specific attack vectors are 'cool' again. And when it comes to email security, all companies now…
The "New Zealand Buy Now Pay Later Business and Investment Opportunities Databook - Q2 2024 Update" report has been added to ResearchAndMarkets.com's…
The "Kenya Buy Now Pay Later Business and Investment Opportunities Databook - 75+ KPIs on BNPL Market Size, End-Use Sectors, Market Share, Product Analysis,…
Regulatory News: Median Technologies (FR0011049824, ALMDT, PEA/SME eligible, “Median” or “The Company”) will host two live webcasts on September 5, 2024.…
RWS, a unique, world-leading provider of technology-enabled language, content and intellectual property solutions, announces that Mark Lawyer has joined…