Keysight Aims To Provide Certification Tools For US Cyber Trust Mark Program
Keysight Technologies, with a market cap of $20+ Billion, is a publicly traded testing and measurement company that is positioning itself as an integral vendor in the new U.S. Government "Cyber Trust Mark" certification, providing automated self-certification tools to IoT device manufacturers. But how are they different from UL and others?
We spoke to the company, and in this report, we examine its offering, go-to-market, competitive differentiation, and involvement in the U.S. Cyber Trust Mark.
Related: "U.S. Cyber Trust Mark" For IoT Devices Examined
Keysight ********
******** *** ******** **** ** *******-*******'* test *** *********** **********, ******** ********, and ******* ********** **** ****** *** early ******** ********* ** ********** ****.
*** **** ********* ***** *** **** off **** ** ** **** ** Agilent ************ *** **** ****** ***** independent ** ****. **** *** ************* in ********** *** ******* **,*** ********* globally ****** ** ******** *** *********** locations.
Not * ******* *** ************* ***
***** ** ******** *********, ***** ********, **** **** **** ** *** provide ************* ******** *** ****** ***** the ***** *** ******** ********* *** to **** *** *******:
**'** *** * **, *** ******** testing **** *** ************* ********, ******** we *** * *** ******** ** components ** ****** **** ** *** other **** ** ***** ******* ************, across **** ** **********. ** ***'** designing, ********** *** ********* * *******, we **** ** **** *** *** the ***** *** **** ** *** done **** *** **** ** **. Whether **'* ******** * *** ******* and ******* ** ** ****** ** getting ** ********, ******* *** ************ and ** * ****** *******. ******** spans **** ** ********* ******; ********** communications, ********* *** *******, ********** *** energy, *** ** ***** ****, ****** discovery *** ***, ***** **** ***********, chip *** **********, *** ********* ******* electronics *************. ** *** **** *************, you **** ******* ***** ********, ** supply * *** ** *****.
US ***** ***** **** ***********
******** *** *** **** ***-*******-***** ******* and *********** ****** ******** **** ***** ***** ***** **** ************. **** ********* **** *** ******** to ***** ********* ****-********** ***** ******* to *************:
*** ****** **'** ******** **** *** Cyber ***** **** ************ ** *** White ***** *** **** ******** *** make **** **** ******** *** ******* acceptance ** *** ******* ** ********** the ******** *******. ** *** ***'* have ** ** *** *** ******* mapping *** ****** *** *** ** test **** "********** *****." *** ***** up *** ** *** ***'** *** the ***** ***** **** ******* ************, and ***'** **** ****** **** *** click **, *** **'** ** *** test.
***** **** **** *** **** ********* knowledge ** *** ***********, ******** ****** be ********** **** ** ******* *** test ******** ** ************* ** ****-******* their ******** *** *** ***** ***** Mark.
US ***** ***** **** ******* *** ************* **********
******** **** *** ******* ********** ** any ******* **** ***** ***** ***** **** (*** ******)*** **** **** ************ *** *** testable (****** ******** *******) *** *** cost ** *************.
**** **** **** ******* ************* (***-******, non-Google) ***** ****** *** ***** *** certification *** ** *** ***** ** using * ************* *** (*.*., **), which ***** ** $**,*** *** * single ****** ***** (*.*., *** ********), and **** ************ *** **** ** different ****** **** ********* **** *******.
******** **** **** ***** *** ******* platforms *** *********, ******* ** $**,*** annually, *********** ************* *** **** *** self-certify *** ** *** ******* ****** than ****** *** ****** *** * testing *** *************.
IoT ******** **********
******** **** *** ***** *********** ** a ******** ******** *** * *********** solution *** ********** ************* ******* ******** **.**, ****, ****, * ********** *** **** **** in ******. ******** ******** ****** ***** software ******* ***** *** * ****** test ******* ** * ****** ******, which ******** **** ************ ******** ***** multiple ******* ** *****.
Customer **** - *************, **********, ******* *********
******** ***** **** ******** ********* ***** to *********** ************* *** ********** ********:
*** ******* ******** **** ** *********** manufacturers, ******** ** ******* ********** ********; who ****'* ****** **** **** ***** exactly *** ****'** ***** **. **** education ** ******** ****** *****, ********* part ** **** ***** ************* *******. So ****'** ******** ************* *** **** want ** ****** ****** **** ******* and ******** ********** *** **** ** expand **** ****** ********.
****, ** **** **** **** *** seeing ****** ** ******** **************, **** infrastructure "*********" (*.*. ******** *********):
********* ** ******** **************, ******** *********, you ****, ****'** *** * *** a ******* ** ** ************* ******* of ***** ************, ** ***, ****'** really ********. ** **** ******** **************, we're ******** ** *** **** ********, and *********** *** ****** **** ** do ****** **** ****** *******, ** understand *** ********* ********* ******* ** their ******** ** ***** ** ****** their ****** *******.
*******, ** **** ***** **** *********** with ********* *** ******* *** **** challenges ** **** **** ************* **** secured ***:
*** ** *** ********** **** ******** smart *********** ** ******* ** ***** servers, *********, ******** ******* *** ** your ********* *******, ** **** **'** got ****** **** **** ** **** practices *** ******** *********** *** ******* right ***. *** *** ******* **, if ***'** *** * ******* ******, and *** **** *** ********* ****** up ** ****, *** *** **** your ******* ******** ***********, ** ******* Defender ** **** ****** ********, *** you **** **** ** ** ****, you've **** ****** **% ** **** problems. ******* **** ******* *** ***, and ****'** **** ******* *** ****** who *****'* ******* *******. ** ** you **** ** *** ***** **** of *******, **** ****** * *** of **** ******** **** *********** **.
********** ********* *** ********** **** ******** auditors **** ****** ******** *********:
**'** ******** ** *** ********* ** the ********** ****. **** ** **** don't **** **** ****'* **** ** their *******, *** **'** ****** * lot **** ********** **** ****, *** security ******** *********. ***** *** ********* the ******* *** ***** ** * pentest *** ***, ** * **** security *****, ***** **** **** ****** and *** ** **** *** **** into *** ** **. ** **'** seeing * *** **** ********* **** enterprises ****, "*'* ******* **** ***** on ** *******. **, *'* ******* myself ** ****. *'* *** **** what ** **." *** **** ****'** call ***** ******** ***** ******* ******** network ******** ******** *** ****.
***** ******** *** * ***** ***** of ********* *** *** ** ******** or ******* ******** ******** *******, **** would ** ********* ***** ** ************ product *&* ** ********** ******** ******** that ** *** ****** ******** *******.
Vulnerability ******** - ******** "*******"
******** **** * *** ***** ** its ******** ** ************** ******** "******"** *** ** **** ********** ******* issues **** ************* *********. **** ******* Bluetooth, **-**, *** ***** *********:
******** ********* *** ********:
** *** ******** *******, ***** ***'** systematically ********* ****** **** * ************* protocol ****** ** ***** ** ******* the ***** ** *** ***** ****. The *** ******* **** ** ** lets *** **** ********** ******* ******** in ** * ******, * ********* implementation ** ** ** **************. **'** got **** ******* *** ****** *******. We **** **** ** ********* *******, Bluetooth *** ******. ******* ******* ****** peripheral *** **** ***** ** *** conversation, ******* **** ******* *** ***********. We **** *** **** *** ** Fi. ********* ** ****** *****, ********* a ******, ********* ***** ***** ******* from ********* *********.
**** ** **** **** ** **** to ****/****** **'** *** * ****** of ************* ** ******* *** **'** basically **'** ************** ********* ****** **** the ******** ******. ** **** ***** be ***** **** ******* **** *** too *** ** *** *****. ******** invalid ******. *** *******, ** * particular ***** ** ******** ** ** a ***** ******* *** *** ***, and ** *** ** ** *** to *** **** *******.
*** ********* ****** ********* * ******** target ** ***** ** ******* ***** on ***, *****, *** *** ** scheduled *** ********* **** ******:
Known ************* *******
********'* ******** **** ****** ******** ******* for ***** **** ***** ** *********, communication *****, ** ****** ********* ******* (e.g., ******* **).
******** ***** **** **-** ** * common **** ***** *** ******** *******:
** ** ******** ** ******** ***** for * *** ** ******** *******. Certainly, ** ****'** ******** *********, ** can ** ****** **** * ****** attack, ***** ** *** ** ***** a ********* ****** *** ** ** access *****, *** ***** ** **** reconnecting ** *** ******** *** **** we *** **** ***********. ** **** offer ***** ***** ******** *******. *** sysetm **** ***** *** ******* *******, and **** ******* * **** ** that, *** **** *********** ** * replay ****** ** **** *** *** to ************ ********* ** *** ****** and **** **'** **** **** *** password **. ** **** ** ** Fi *****, **** ** *** ******** attacks, ******* * *** ** ********* devices, *** *******, **** ** ***** a ***** ********* ********.
*******, ********'* ******** *** ** ********** for * ******** ***** ** ***** into * "******** *****" ** **** tests *** ** *********** ********* *** the ************* ************:
**** *** *** ****** ********* ********, so ** ****** ******* ** *** well ** *****, *** ** ** works ****, ** ****** ******** *** time ** ******** **** * ****** for ***** ***************, ******* ** *** IPVM ***** *** **************** ********.
Automated ***** ******* ********
**** ************* ********** ****** ******** ******** on ********* ********:
********* ******** ***** *** **** ************* testing, ******** **** *** ******* **** false ********* *** ***** *********. *******, while ************* ******** ***** ******* ******* responses **** *** ********, ***** ***** rarely ******** ******* * **** ************* test, ** **** *** ****** ******** side *******.
******** ******* ** * ****-***** ********* for ********* ************, *********, ****, *** more ** *** ** ***** ********** behavior, ******** *****, ** *******.
*******, ***** ******* * **** *** human ******** *** ************, *** ***** types ** ********* ***** *** * good ***** ** ******* ** ****** out *** **** ******* ****.
******** ** *** ***** ** ********* these ***** ** *****, ***** *** many ****** **** ******* ******* ********, one ** ***** *********/******.
*******
***** ******** ****** * ***** ***** of ******* ******** *** ********, *** testing ******** **** ***** ** **** for *** ******* (*.*., ** *******, access ***********, ***.) ** **** ** a **** ************ ******* **** ~$**,*** - $**,*** ********* ** *** **** modules **** *** *********:
***** ** * **** ********** **** is *** **** ********* *** ** the **** ** ******, **** ********* engine, *** ****.
******** **** **** **** ** *** sales *** ******* ********* *******,*****, *** *** ********* *** ** Government *********.******* ** *** **** *****, ******** is *** ****** ** ** **** by *** ******* ******** ******** ***********.
Publicly ******
******** ** * ******** ****** ******* with ***** ******* ** $*.** *******, ** **% **** $*.** ******* in ****. *******,******* ******* *** ***** * ******** of **** *** **** ********** **** compared ** ****, *** *** *******'* *** ****** was **** ~**%.
*** ***** ** **** **% ** the **** **** *** **** ~**% from *** **** **** ** $***.**:
******* ***** *********, ********'* ****** *** is $**.* *******.
Network ******** ******* - **** *********** ****
** ************ ******** **** ********** $*.* ******* *** ********** ****'* experience ** **-**, **, *** ******* device ******* ** "*** ******* *************" to ********.
********, *** **** ** ******** ******* the ***********, **** **** ************, ****'* testing *** *** ******* **** ********:
** **** **** ** *** ** the ******* *****, *** ** **** really ******* ****** *******. ** *******, switches, *********.. ** ** ***'** ******** with *** *** *****, ** **** really ***** * *** *****, ******* Keysight *********, *** ****** ***** *, the ******** ***** *** ** *******. What ********* *** ********* ******* ** the ***** ***, *** **** ** measure *** **** *** ******** *****, or ** ****** ********, *** *** need ** **** *** **** ***** can **** *****-****-**-***** ***** ****** * certain ***** ** **** ** *** network *** ****'* *** ********** ***** rate. *** **** **** ***** ** you ****** *** ********** *********, **** kind ** ***** **** *** ****** good **.
*******
***** **** *** *** ****** ********'* available ********/********, *** *********** ** *** U.S. ********** ***** ***** **** ********** is * ******** **** *** *** company ** ***** *** **********, ** some *****, ** ********* ****.
** ******* ***** ** * ****** probability **** ************* **** ***** *** program, ** **** *** **** *** NDAA, ********* ********** * *********** ********* in *********, ***** **** ** *** market **** ****** ** *** *** Cyber ***** ****. **** ****** ** positive *** ******** *** ***** ******* involved.
*******, ***** *** ***** **** ** a ********* **********, ** ******** **** us, ******* ************* (***-******, ***-******) ***** simply *** ***** *** ************* *** to *** ***** ** ***** * certification *** (*.*., **), ***** ***** be $**,*** *** * ****** ******, and ****** ******** **** **** **** product **** ****** ****** *** ** certify **** *******.
*** ********** ** ******** ** ** launched ** ****, ** ** ******* to ** **** *** **** ********** will **** ***.