NIST

NIST Cybersecurity framework with Google Cloud Platform (GCP)

Aligning to the NIST Cybersecurity Framework in Google Cloud

Code Signing plays an important role as it can identify legitimate software compared to malware or rogue code. In technical terms, Code Signing creates a hash of the code and encrypts it with a private key adding its signature. During execution this signature is validated and if the hash matches, it gives assurance that the code has not been modified. It also establishes assurance that the code is issued from the legitimate author that it is claiming to be.

A Detailed Guide to Code Signing Abuse

As organizations step up their cloud journey as fast as possible to utilize the advantages of the cloud e.g. scalability, flexibility, cost-effectiveness, they have to parallelly think about data security in their IT landscape. This makes encryption, and subsequently HSMs, an inevitable component of an organization’s Cybersecurity strategy.Based on the use cases, we can classify HSMs into two categories: Cloud-based HSMs and On-Prem HSMsIn regards to the classification of HSMs (On-prem vs Cloud-based HSM), kindly be clear that the cryptographic technology is the same, but delivered via different methods.

Cloud-based vs On-premises HSMs

FPE is an encryption mechanism that keeps data encrypted while databases and applications remain functional. FPE preserves the format of the data which allows legacy systems and networks to remain functional while data is encrypted. GCP provides a DLP API which offers FPE through their platform. This helps in making all types of systems and programs functional/available and also improves data auditability by removing all PII data within it.

Format Preserving Encryption with NIST recommendations

National Institute of Science & Technology

What is the NIST? What is the purpose of the NIST?

Payment Card Industry Data Security Standards

What is PCI DSS? How do you become compliant with PCI DSS?

Federal Information Processing Standards

What is FIPS? How do you become compliant with FIPS?