Shielded computing vs traditional security measures: which is more effective?

Feb 08,2023 by Meghali Gupta

527 Views

Table of Contents

What is Shielded Computing?
What is TPM and how it works?
TPM uses and benefits
What are Traditional Security Measures?
Shielded computing vs traditional security measures
Conclusion

What is Shielded Computing?

A secure computing environment designed to protect against unauthorized access and tampering is known as Shielded computing. The creation of this type of secure environment is typically done by using hardware-based security features, such as a Trusted Platform Module (TPM). This security feature is a microcontroller built into the computer’s motherboard.

The purpose of the TPM is to store encryption keys, digital certificates, and other secure information, making it possible to create a secure environment even if the computer’s operating system has been compromised.

What is TPM and how it works?

The Trusted Platform Module (TPM) is a specialized security chip found in laptops and desktop computers, designed to secure the device with integrated cryptographic keys. It verifies a user’s identity and authenticates the device, protecting against firmware and ransomware attacks.

A TPM is used in shielded computing for digital rights management (DRM) to protect Windows-based systems and enforce software licenses. It can also be used to store passwords, certificates or encryption keys. This type of security chip can be used with any major OS. In conjunction, it works excellently with other security technologies, such as antivirus software, firewalls, smart cards and biometric verification.

A TPM chip contains an Endorsement Key (EK) RSA key pair for secure storage and an Attestation Identity Key (AIK) to protect against unauthorized firmware/software modifications. The Storage Root Key is created from the EK and owner-specified password. AIK hashes critical components before execution and verifies them with a network server, denying access if modifications are detected.

TPM uses and benefits

The benefits of using TPMs include:

Generation, storage, and control of cryptographic keys.
Platform integrity through change-detection metrics.
Platform authentication using TPM’s RSA key.
Defense against firmware, ransomware, dictionary, and phishing attacks.
Protection of digital media rights with DRM technology.
Secure protection of software licenses.

What are Traditional Security Measures?

On the other hand, traditional security measures refer to the methods and technologies used to secure physical assets, information, and individuals from unauthorized access, theft, or damage.

These traditional security measures include –

Physical security: locks, security cameras, guards, fences, etc.
Network security: network firewalls, antivirus software, intrusion detection and prevention systems, etc.
Authentication and access control: passwords, biometric identification, smart cards, etc.
Data encryption: used to protect sensitive information transmitted or stored electronically.

The goal of these measures is to prevent unauthorized access, maintain the confidentiality and integrity of information, and ensure the availability of resources in the event of a security breach.

In this article, we will see which is more effective Shielded computing or traditional security measures.

Shielded computing vs traditional security measures

Feature	Shielded computing	Traditional security measures
Definition	A secure computing environment that is designed to protect against unauthorized access and tampering, created using hardware-based security features such as a Trusted Platform Module (TPM).	Software-based security solutions such as antivirus, firewalls, and intrusion detection systems are designed to prevent unauthorized access and protect against security threats.
Effectiveness	Provides a secure environment for sensitive information, designed to prevent unauthorized access to data and protect against tampering.	Flexible and can be updated and customized more easily, have a wider range of capabilities, and are typically less expensive.
Best for	Organizations with high-security requirements for sensitive information.	Organizations with flexible security needs and limited budgets.
Cost	Generally more expensive than traditional security measures.	Typically less expensive than shielded computing.
Customizability	Limited, as it relies on hardware-based security features.	More flexible and can be updated and customized more easily.
Capabilities	Limited to provide a secure environment for sensitive information.	Can detect and respond to new security threats and have a wider range of capabilities.
Complexity is	Maybe more complex to set up and maintain, as it requires specialized hardware and expertise.	Typically easier to set up and maintain, as they are software-based solutions.
Scalability	May be less scalable, as adding or upgrading hardware-based security features can be more challenging.	More scalable, as software-based solutions can be easily updated and deployed across multiple systems.
Maintenance	Requires regular maintenance and updates to ensure the hardware-based security features functioning properly.	Typically require less maintenance, as updates and patches can be easily applied to software-based solutions.
Integration	May be more difficult to integrate with existing systems, as it requires specialized hardware and expertise.	Typically easier to integrate with existing systems, as software-based solutions can be easily deployed across multiple systems.

Thus, the most effective approach to security between Shielded computing and traditional security will depend on the organisation’s specific needs.

A combination of shielded computing and traditional security measures is likely the best approach for organisations that need high-security requirements. This will provide the organization with the most comprehensive protection against unauthorized access and tampering and the flexibility and affordability of traditional security measures.

Conclusion

Shielded computing and traditional security measures have their strengths and weaknesses, and the most effective approach depends on the organisation’s specific security needs. Organizations with high-security requirements should combine both approaches to provide the most comprehensive protection against unauthorized access and tampering.