SSL Decryption A delicate balancing act is taking place on networks globally. It is the balance between applying strong protective measures to keep data safe and unintentionally concealing new IT security vulnerabilities. And it all centers on SSL (Secure Socket Layer) encryption. Just as SSL encryption protects certain details of a transaction, it can also conceal and protect malicious cyberthreats. This means it is essential for organizations to decrypt and inspect SSL traffic, to be sure it is not being used to propogate malware
Security in an Encrypted World Encryption is one of the basic enabling technologies of the Internet. We rely on it to do business with partners, shop online, send email, and access applications while maintaining our privacy, identities, and security. It is so important that most cloud providers, such as Google, Facebook, and others, along with most mobile apps, have already switched to using encryption by default on all connections.As SSL/TLS encryption has become more important, encryption standards have changed over time to address security weaknesses or stay ahead of faster computers that make brute-force attacks easier. One such recent update is the introduction of ephemeral key cryptography, which makes encryption more secure and encourages even more widespread adoption.
Inspecting SSL Traffic: How to Balance Visibility and Security An organization’s network is always vulnerable — and yet always growing. New technologies and new applications, increasing demand for mobile access and hungry bandwidth are all placing unprecedented pressure on organizations’ infrastructures. Complete visibility of all traffic is essential if performance problems — or critical security issues — are to be quickly identified and resolved. Even a lack of visibility and monitoring into 10% of data traffic creates a significant blind spot, leaving networks vulnerable to malicious attacks, noncompliance, and damaged performance. So what may be stealthily lurking within SSL encrypted data? There are two key risks that businesses need to be aware of: tangible threats and more subtle threat indicators
Active SSL – See Into Traffic Encrypted with Ephemeral Key Ixia adds Active SSL to its SecureStack feature set. Available for the turnkey Vision ONE platform, Active SSL provides visibility into traffic encrypted with ephemeral key to offload the SSL burden from tools and provider improved network security.
www.youtube.com 
