Info Image

ITRS Group CISO Reza Moqadasi on the Challenges of TLS 1.3 and Steps to Mitigate Them

ITRS Group CISO Reza Moqadasi on the Challenges of TLS 1.3 and Steps to Mitigate Them Image Credit: ITRS Group

The Fast Mode spoke to Reza Moqadasi, CIO / CISO at ITRS Group on new encryption technologies and their impact on today's networks. Reza joins us in a series of discussions with leading vendors in the traffic management, service assurance, traffic monitoring, analytics, policy control and network security space, assessing various attributes of encryption, its benefits as well as the challenges it poses, specifically loss of visibility that makes networking increasingly complex.

Tara: What are the biggest challenges you see from new encryption technologies such as TLS 1.3?

Reza: Deployment of TLS 1.3 as a robust protocol for exchanging encrypted data will enhance the security posture of the enterprise. However, in some organisations it can also lead to loss of visibility into the content of communication, which creates a host of challenges in a wide range of legacy systems and for a diverse group of technical, regulatory and security stakeholders.

Tara: What are some of the ways enterprises can address visibility issues related to encryption?

Reza: The adoption of TLS 1.3 needs to be balanced with a set of measures that maintain inherent visibility across the IT estate. One of the primary measures involves modifications to the network architecture and topology of connectivity. Powerful monitoring suites and observability platforms, such as Geneos and Obcerv, can provide the overlay for the end-to-end visibility across the hybrid enterprise estates.

This interview is a part of The Fast Mode's Real-time Visibility for Encrypted Traffic segment, featuring 34 leading IP networking solution providers and their views on the impact of encryption on traffic visibility. A research report on this topic will be published in February 2023 - for more information, visit here.

NEW REPORT:
Next-Gen DPI for ZTNA: Advanced Traffic Detection for Real-Time Identity and Context Awareness
Author

Reza is CIO / CISO of ITRS Group. He is a Cybersecurity Researcher in the Centre for Doctoral Training at University College London (UCL); his research interests include the quantification of cyber risk and resilience in mergers and acquisitions (M&A).

PREVIOUS POST

Enhancing Network Programmability and Automation With Nokia Altiplano for SDAN

NEXT POST

The Future of Edge-Driven Manufacturing