Software Integrity Blog

 

[Webinar] Security by Obscurity: The Flip-Side of the Compliance Coin

In our software compliance webinar, Matan Scharf (Synopsys) explains the hidden security dangers of software standardization. Available on demand.

Software compliance webinar: Security by obscurity

Bringing an idea from prototype to product involves challenges, including the need to comply with international standards and government regulations. This is especially true in industries such as construction, pharmaceutical, and transportation, where lives are at stake. Regulatory and compliance requirements help create safer, more reliable products. Moreover, well-defined standards for interfaces, protocols, and architecture elements add granularity, enable collaboration between manufacturers, and are instrumental in creating global ecosystems. Need proof? Check out an invention called “the internet” and what that did for humankind.

The trade-off for safety is security

Standards and compliance assure a level of quality and interoperability. But from a malicious agent’s point of view, they level the playing field in terms of attack surface. An attacker that finds a design flaw in a standard such as the HTTP suite or a security vulnerability can leverage the system’s widespread use to expand the reach of an attack campaign.

Software compliance webinar

In this webinar, we’ll discuss how compliance and standardization can amplify the spread of malware and increase the damage rendered by security vulnerabilities. We’ll use the automotive industry as an intriguing case study for how the old-fashioned notion of “security by obscurity” can efficiently contain potential harm.

What: Security by Obscurity: The Flip-Side of the Compliance Coin

When: On-demand recording

Who: Matan Scharf, automotive solutions manager, Synopsys

Watch now

 

More by this author