Search

COMMENTARY
INFORMATION TECHNOLOGY | Contributed Content, Singapore
Published: 10 Aug 12
982 views


Tommi Lampila

3 challenges in user key management

BY TOMMI LAMPILA

Singapore, as an international city and the regional business and financial hub of Asia Pacific, has been inextricably in line with international standards of excellence.

While the adoption of the PCI-DSS and Sarbanes-Oxley Act (SOX) SOX standards began among North American organizations, multinational companies with global presence are adopting the standards and compliance efforts centred on them are increasing. For example, companies that need to be compliant with PCI-DSS also require their partners that exchange and co-process credit card data, to maintain the compliance.

Early before the development of the compliance requirements, global enterprises have adopted Secure Shell (SSH), a network protocol invented in 1995 for securing data communication. Today over 3000 global organisations use the SSH data-in-transit solution for moving information, including 7 of the Fortune 10 and trends have shown that there is an increase of SSH usage in the financial industry to meet compliance in recent years.

For these enterprises, the most critical enterprise data and applications are often transported and housed on SSH and OpenSSH servers. In order to access the data, user authentication is required. However, in today’s complex enterprise environments, it is nearly impossible to map the trust relationships between individual users, system accounts and application ID’s to their respective targeted destination SSH servers.

Enterprises typically have one or more IMS (Identity Management System) for their users, which usually does not encompass access to all systems and accounts across the enterprise and provides no visibility into user keys keys that provide access to the organizations most sensitive information.

Traditional manual approaches to managing user keys are not only time consuming and expensive; but also easily trigger manual errors in key setups. This not only poses a major security and compliance risk, but has also proven to be cost ineffective.

Challenges in managing keys

1. Compliance
Today the compliance standards are higher and even more specific on user key management. For instance, PCI DSS requires enterprises to “Protect encryption keys issued for encryption of cardholder data against disclosure and misuse.” and “Fully document and implement all key management processes and procedures”.

In addition, the ISO 27001-1 also specifies requirements for key management. Organizations need to expend more effort to comply with the more stringent requirements.

2. High cost
Setting up new keys and trust-relationships in traditionally manual way is complex. It is even more complex to rotate and remove the keys. The more dynamic the environments are, the more key operations are required. The widespread cloud and grid computing adoption has increased the burden of IT departments of many of institutions.

3. Growing risk
According to the IBM X-Force 2011 Trend and Risk Report, there were a large number of automated password guessing attempts directed at secure shell servers in the latter half of 2011.

In addition, the top 10 threat actions types by number of breaches within larger organizations, “Use of stolen login credentials” ranked no. 1, according to 2012 Data Breach Investigations Report by Verizon. The present situation calls for enterprises to seek ways to eliminate complex manual work, reduce risk of unauthorized access, improve visibility and meet compliance.

A logical three phased approach of user keys management The best practice of user keys management to overcome these challenges should include three phrases: discovery, monitoring and management.

First, the legacy environment of existing deployed private and public SSH keys and their associated users are discovered and manual errors and mismanagement in the past are then identified.

Thereafter, this environment is locked down and monitored, and the authorized users are linked to the respective servers via user and group information, as well as the defined access policies.

Finally, the environment is brought under automatic management, and user keys are automatically deployed, revoked, recertified and rotated according to changes in the operational environment and user repositories. 

The views expressed in this column are the author's own and do not necessarily reflect this publication's view, and this article is not edited by Singapore Business Review. The author was not remunerated for this article.

Tommi Lampila

Tommi Lampila

Tommi Lampila is the Vice President, APAC, SSH Communications Security. 

Contact Information



Sign up for our newsletter

 

Do you know more about this story? Contact us anonymously through this link.

Click here to learn about advertising, content sponsorship, events & rountables, custom media solutions, whitepaper writing, sales leads or eDM opportunities with us.

To get a media kit and information on advertising or sponsoring click here.

Tags: Tommi Lampila, SSH Communications Security, PCI-DSS Singapore, Singapore's enterprise environment, Identity Management Sytem in Sngapore

CO-WRITTEN ARTICLES & SPONSOR CONTENT ››

In this day and age where start-up SMEs are increasingly looking to set up shops in high growth industries such as IT, one SME has shown that thriving in mature industries is possible despite highly challenging conditions.  SL Education Centre is an education company geared towards helping young academically struggling students maximise their potential.
6 views

MEF introduces the Third Network vision.
22 views

PRINT ISSUE »

Subscribe Now
Trains, planes, automobiles and drones

148 views

As goes Hong Kong, so goes Singapore?

1291 views

Office property shows no signs of a slowdown

357 views

MOST READ EXCLUSIVES

Singapore’s 20 most influential 40 and under lawyers

Singapore’s 20 most influential 40 and under lawyers

Check out who made our cut.

by KRISANA GALLEZO
15 Aug 2014 | 157575 views
 

9 most expensive credit cards in Singapore

9 most expensive credit cards in Singapore

The most premium requires $150,000 annual income.

by KRISANA GALLEZO
21 Jul 2014 | 108508 views

13 most exclusive credit cards in Singapore

13 most exclusive credit cards in Singapore

Some of which you’ve probably not heard of.

by KRISANA GALLEZO
27 Aug 2014 | 81513 views
 

11 craziest credit card purchases in Singapore

11 craziest credit card purchases in Singapore

Find out if each is worth the outlay.

by KRISANA GALLEZO
22 Sep 2014 | 24967 views

Singapore's 8 hot new restaurants in July

Singapore\'s 8 hot new restaurants in July

More Singapore openings from famous restaurants in Asia.

by KRISANA GALLEZO
4 Aug 2014 | 19852 views
 

20 most preferred hotels of Singapore travelers in Asia

20 most preferred hotels of Singapore travelers in Asia

Hotels in Thailand dominate the list.

by KRISANA GALLEZO
12 Aug 2014 | 19029 views

Singapore’s 8 hotels coming your way next year

Singapore’s 8 hotels coming your way next year

A total of 3,458 hotel rooms will soon be available.

by KRISANA GALLEZO
8 Sep 2014 | 17179 views
 

Towers Watson Singapore’s Spa Room allows staff to regenerate during lazy hours

Towers Watson Singapore’s Spa Room allows staff to regenerate during lazy hours

Also, check out awesome photos of redesigned meeting rooms and clubhouse.

by KRISANA GALLEZO
9 Jul 2014 | 11118 views

Singapore’s 8 hot new restaurants in August

Singapore’s 8 hot new restaurants in August

Get a taste of an aromatic broken rice dish without MSG.

by KRISANA GALLEZO
4 Sep 2014 | 10305 views
 

Have you been to The Providore Warehouse yet?

Have you been to The Providore Warehouse yet?

Check out some photos inside.

by KRISANA GALLEZO
1 Sep 2014 | 9723 views

Awesome workplace at 501: How's having a meeting while cuddling a teddy bear?

Awesome workplace at 501: How\'s having a meeting while cuddling a teddy bear?

Also check artistically designed in-house locations for video shoots.

by KRISANA GALLEZO
6 Aug 2014 | 9081 views
 

Check out HSBC’s high-tech flagship branch at Orchard Road

Check out HSBC’s high-tech flagship branch at Orchard Road

It’s digital hub is a star attraction.

by KRISANA GALLEZO
23 Jul 2014 | 6042 views

What 3 market leaders can tell you about price comparison sites in Singapore

What 3 market leaders can tell you about price comparison sites in Singapore

Financial price comparison sites face lack of consumer’s confidence.

by KRISANA GALLEZO
10 Jul 2014 | 4928 views
 

Have spare time before boarding? Dine in at Old Chang Kee’s first Changi Airport outlet

Have spare time before boarding? Dine in at Old Chang Kee’s first Changi Airport outlet

The new outlet’s construction cost more than half a million dollars.

by KRISANA GALLEZO
11 Sep 2014 | 4856 views

5 craziest things you can't imagine founders would do to make their startup successful

5 craziest things you can\'t imagine founders would do to make their startup successful

Will you jump out of the plane flying at over 15K ft  just to catch a potential client?

by KRISANA GALLEZO
3 Sep 2014 | 4824 views
 

Three best buddies in their 30s set up 6 Prawns and a Beer

Three best buddies in their 30s set up 6 Prawns and a Beer

Here’s a new food hub at Bukit Timah to enjoy a well-loved seafood with beer.

by KRISANA GALLEZO
12 Aug 2014 | 4037 views

The wait is over: Japanese restaurant chain ON-YASAI finally hits Singapore

The wait is over: Japanese restaurant chain ON-YASAI finally hits Singapore

10 to 15 more outlets coming over the next 5 years.

by KRISANA GALLEZO
28 Aug 2014 | 3924 views
 

Find out how 3 young men at 20s founded a startup

Find out how 3 young men at 20s founded a startup

At 21, they built a job portal to help young people find their jobs.

by KRISANA GALLEZO
10 Jul 2014 | 3785 views

These NUS students boldly suggest removal of Malaysian Airlines' CEO to survive

These NUS students boldly suggest removal of Malaysian Airlines\' CEO to survive

That's just one part of the strategy.

by KRISANA GALLEZO
16 Sep 2014 | 2727 views
 

No boys allowed: Here’s a coworking space designed for women only

No boys allowed: Here’s a coworking space designed for women only

The office space can be transformed to a large event venue for social nights.

by KRISANA GALLEZO
14 Aug 2014 | 2618 views

Get ready to work and play at Spotify’s regional office

Get ready to work and play at Spotify’s regional office

All the furniture except the bean bags were imported from Sweden.

by KRISANA GALLEZO
23 Sep 2014 | 2589 views
 

DBS added 1000 more staff in 2013

DBS added 1000 more staff in 2013

It topples UOB to become Singapore's second largest commercial bank.

by KRISANA GALLEZO
22 Jul 2014 | 2293 views

Haji Lane welcomes a hippy motorcycle cafe

Haji Lane welcomes a hippy motorcycle cafe

It serves all-day brunches with motorcycle merchandise up for grabs.

by KRISANA GALLEZO
28 Jul 2014 | 2246 views
 

Worry about your loved ones’ whereabouts no more

Worry about your loved ones’ whereabouts no more

Folr introduces a real-time geo-location tracking mobile app that also details where they were.

by KRISANA GALLEZO
5 Sep 2014 | 2151 views

Have money but don’t know what to do? Call DrWealth

Have money but don’t know what to do? Call DrWealth

It creates Asia’s first online financial planning platform for the masses.

by KRISANA GALLEZO
12 Aug 2014 | 2148 views
 

The Assembly Ground will choose for you the coffee that best suits you

The Assembly Ground will choose for you  the coffee that best suits you

It’s an Australian concept brought to Singapore.

by KRISANA GALLEZO
18 Jul 2014 | 2086 views

Singpost acquires Store House in Hong Kong for $12.2m

Singpost acquires Store House in Hong Kong for $12.2m

Here's how management compares HK's self storage market with Singapore's.

by KRISANA GALLEZO
11 Jul 2014 | 2016 views
 

Take a tour at Potato Head Folk’s whimsical dining enclave

Take a tour at Potato Head Folk’s whimsical dining enclave

Murals on the walls inspired by 1930s children’s books are fascinating.

by KRISANA GALLEZO
10 Jul 2014 | 1642 views

Orchard Gateway welcomes the second outlet of Outback Steakhouse

Orchard Gateway welcomes the second outlet of Outback Steakhouse

The store construction costs US$1.5million.

by KRISANA GALLEZO
21 Aug 2014 | 1621 views
 

Arete Culture opens first store in Lam Soon Building

Arete Culture opens first store in Lam Soon Building

It's a one-stop shop for your quirky interior decors.

by KRISANA GALLEZO
24 Sep 2014 | 1609 views
close Don't Show Again

STAY INFORMED! Get our free weekly newsletter