- This topic has 1 voice and 0 replies.
-
Posts
-
-
#News(Security) [ via IoTGroup ]
Auto extracted Text……
Given that it’s such a huge source of profit and the fundamental infrastructure of the future, you might assume that Amazon, Google, IBM, and all the cloud companies raking in billions intimately know every piece of hardware, software, and code in their data centers.
Google today is announcing a new open source chip design based on the lessons the company has learned from their first layer of defense in the company’s 19 data centers on five continents: OpenTitan, the open-source version of the two-year-old Titan chip used in those data centers.
Titan aims to cryptographically prove that the machines operating in Google’s $8 billion cloud business can be trusted, haven’t added vulnerabilities, and aren’t surreptitiously under an adversary’s control.
The security guarantee the chip confers is “super critical when you’re running the planet,” says Royal Hansen, the vice president of engineering at Google Cloud.
The open-source project’s goal is to let customers of Google data centers inspect, understand, and trust their machines from the lowest levels of code.
The open-sourcing of the Titan chip is an effort by Google and its partners to expand transparency and trust at the lowest levels of the machines running in data centers.
Before security software is ever operational, code like the firmware is already active and controlling the boot process.
“If you can’t trust the thing the machine boots on, it’s game over,” says Gavin Ferris, a board member at lowRISC.
“Think about the millions of servers in our data centers: we have baseboard management controllers, network interface controllers, all kinds of chips on these motherboards,” says Hansen.
He says the security needs to begin with the silicon hardware: “It can’t be in the software, because you’re already past that by the time it’s begun to boot and load
Read More..
AutoTextExtraction by Working BoT using SmartNews 1.02976805238 Build 26 Aug 2019
-
- You must be logged in to reply to this topic.
