HP SureStart
important partners in defining our research approaches and priorities .
We are also engaging with leading academic thinkers in cybersecurity to help push the boundaries of our research ideas . For example , we recently sponsored a Chair in Cybersecurity at the University of Birmingham , a UK Academic Centre of Excellence in Cyber Security Research . And we work with our industry colleagues , collaborating on industry standards to help raise the bar in cybersecurity across the world .
Designing for cyber-resilience
The security profession is finally accepting this axiom : given enough resources , an attacker will eventually be successful . This means designing not only security protections , but also mechanisms that detect when protections fail and help recover devices or infrastructure to a good state , at both machine speed and at scale . This is a model already embraced across HP ’ s business PC and Print products , using robust hardware foundations to achieve resilience . It is needed as cyberattacks increasingly try to introduce malware into device firmware , to eavesdrop , monitor , and even attempt to disable computing infrastructures .
Certainly , a single layer of defense won ’ t cut it anymore . If we simply keep building ever-higher walls , the increasingly
HP SureStart
HP SureStart is a flagship example of how of our research team collaborates with product groups to deliver innovative security solutions in practice . Working closely with our Personal Systems Business PC and Enterprise LaserJet groups , we co-designed a hardware and firmware architecture that can detect and recover the deepest levels of firmware attacks . With HP SureStart we introduce cyber-resilience at the endpoint device level , creating the industry ’ s first self-healing BIOS that ensures that even a compromised device can recover to a good state . • well-fundedprofessional criminal organizations we face will find a way through . Instead , we need multiple security mechanisms built-in at the deepest level of our computing devices and infrastructures that offer resilience against cyberattacks , and make security manageable in a cost-effective manner .
“ After three years since its first introduction when it was the first of its kind offering , HP Sure Start is still an industry-leading device security capability . Cybersecurity is a critical challenge that we must address from the ground-up , starting with hardware and firmware , and from the earliest design stage . We continue to work with HP Labs to push the boundaries of current security paradigms to help deliver innovation that will make customers safer , and take the cost out of having to retrofit unnecessary security solutions after the facts .”
— Vali Ali , HP Fellow and Chief Technologist for Security and Privacy , Business Personal Systems , HP
Anticipating threats
In order to do this , we have created our own isolated Malware Lab 1 which we use to investigate pieces of malicious software . This lets us experiment with malware in a contained environment , better understand our adversaries , and test our research approaches to detecting , mitigating , and recovering from real-world attacks . We also want to know which anti-malware solutions might work against as yet unidentified malware . Our security research team is now developing its own techniques for simulating malware behaviors , allowing us to test our protection and detection solutions against possible future malware behaviors even before our adversaries develop them .
Security for blended reality
As we invent our exciting new Blended Reality 2 future , we also need to solve cybersecurity challenges of a new sort . We are researching , for example , the security innovations needed
1 http :// h20435 . www2 . hp . com / t5 / HP-Labs-Blog / Innovative-malware-detection-in-a-changingthreat-landscape / ba-p / 297664 #. WECmEOYrKyl
2 https :// shanewallcto . com / 2016 / 07 / 07 / blended-reality-innovation-is-culture-at-fei-2016 /
to allow 3D printing technology to revolutionize manufacturing . These range from cybersecurity research for our 3D printers themselves , to researching the design of secure workflow capabilities that ensure key security properties are retained in digital designs until they become physically printed objects . This will be key to ensuring that the physical and mechanical properties of a 3D-printed part can be trusted within a securely digitized distributed manufacturing ecosystem .
“ Cybersecurity is important to the success of the HP 3D Print business and the manufacturing transformation HP is driving . We are working closely with the Security Lab to deliver a secure 3D ecosystem and to develop valuable security innovation for future digitized supply chains that will transform manufacturing .”
— Paul Benning , Ph . D ., HP Fellow and 3D Print Chief Technologist
Pulling it all together
To summarize , HP ’ s Security Lab works closely with HP businesses and HP ’ s other Research Labs to deliver cybersecurity innovations and help secure future HP products , services , and solutions , with a focus on minimizing the cost of operation for individuals and corporations alike , maximizing ease-of-use , and delivering user experiences that amaze . Our work takes us beyond HP to global standards bodies and into collaborations with industrial and academic partners , as well as leading customers , with whom we join forces to advance the cybersecurity state-of-the-art and move our industry forward towards a safer Blended Reality future . •
Simon Shiu is Director of the Security Lab . With twenty years of security research and industry experience , Simon manages security research for HP , from dealing with today ’ s growing cybersecurity challenge to delivering security innovation .
Boris Balacheff is an HP Fellow and Chief Technologist for Security Research and Innovation . Boris leads the HP Labs Security Lab research strategy and is responsible for driving security technology innovation strategy with HP businesses .
Issue 5 · Winter 2016 · Innovation Journal 11