Replies to post #207199 on Wave Systems Corp. (fka WAVXQ)

[helpfulbacteria]

As it appears that my remarks...

... have led to this conversational offshoot, I'll be a little clearer.

During my visit at the NSA Conference... I got the feeling from a couple of conversations with Wave folks... that, while they're pleased to be part of HAP, they think of it more of as a "proof of concept" rather than something meant for mass business adoption.

(But... I should add... that I once thought Marisa Tomei was staring right at me when we both happened to be dining at the same Middle Eastern restaurant in SoHo.)

Steven showed me something that Wave folks (or maybe just SKS) have taken to calling "HAP on the Cheap." I took that as a clue...

Best Regards,

c m

[wavedreamer]

CTS,

The HAP we saw (Multi-layered Security Platform) in the NSA Video had built into it at least the following technologies:

- A type 2 hypervisor from VmWare for Virtulization

- Self Encrypting Drive (probably from Seagate Fips-140 certified)that safely stores data at rest better than software encryption and Wave uses the SED to self heal the Hypervisor.

- A Trusted Network Connection (TNC) like what Juniper Networks Provides to the TCG open standards.

- Had a TPM for the many reasons we all know.

- used a product like Wave's Endpoint Enforcer to validate the health of machines trying to log onto the server.

And all the rest, Logging and auditing capabilities ......Etc.

and yes there is all kinds of products continuing to be deployed that are not secured in the best possible way. JMO