{"id":55511,"date":"2020-01-22T00:00:00","date_gmt":"2020-01-21T21:00:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blog_prohoster\/chto-shifrovat-v-korporativnoj-sisteme-i-zachem-eto-delat"},"modified":"2020-02-18T14:03:38","modified_gmt":"2020-02-18T11:03:38","slug":"chto-shifrovat-v-korporativnoj-sisteme-i-zachem-eto-delat","status":"publish","type":"post","link":"https:\/\/prohoster.info\/en\/blog\/administrirovanie\/chto-shifrovat-v-korporativnoj-sisteme-i-zachem-eto-delat","title":{"rendered":"What to encrypt in a corporate system? And why do it?","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

GlobalSign conducted a survey<\/a><\/noindex>, exploring how and why companies use public key infrastructure (PKI) at all. About 750 people participated in the survey: they were also asked questions about digital signatures and DevOps.<\/p>\n

If you are not familiar with the term, PKI enables systems to securely exchange data and verify certificate holders. PKI solutions<\/a><\/noindex> include the authentication of digital certificates and public keys for encryption and cryptographic verification of data authenticity. Any sensitive information relies on the PKI system, and GlobalSign is considered one of the leading global providers of such systems.<\/p>\n

Now, let's look at some key findings from the study.
\n<\/a><\/noindex><\/p>\n

What is encrypted?<\/h2>\n

\nOverall, 61.76% of companies use PKI in one way or another.<\/p>\n

\"What
\n
\nOne of the main questions that interested researchers was which specific encryption systems and digital certificates respondents use. Unsurprisingly, about 75% reported using public certificates SSL or TLS<\/a><\/noindex>, while around 50% rely on private SSL and TLS. This is the most popular application of modern cryptography \u2014 encrypting network traffic.<\/p>\n

\"What
\nThis question was asked to companies that answered positively to the previous question about using PKI systems and allowed for multiple responses.<\/i><\/p>\n

A third of participants (30%) said they use certificates for digital signatures, while just under that rely on PKI for email protection (S\/MIME<\/a><\/noindex>). S\/MIME is a widely used protocol for sending encrypted messages with a digital signature and a way to protect users from phishing. Given the rise in phishing attacks, it is clear why this is becoming an increasingly popular solution for ensuring enterprise security.<\/p>\n

We also considered why companies initially choose PKI-based technologies. Over 30% pointed to the scalability of the Internet of Things (IoT<\/a><\/noindex>), while 26% believe that PKI can be applied across various industries. 35% of respondents noted that they value PKI for ensuring data integrity.<\/p>\n

Common challenges in implementation<\/h2>\n

\nWhile we know that PKI holds significant value for organizations, cryptography is a rather complex technology. This leads to challenges in implementation. We asked respondents what they think are the main issues with implementation. It turned out that one of the biggest problems is the lack of internal IT resources. There simply aren't enough qualified workers who understand cryptography. Additionally, 17% of respondents reported long deployment times for projects, and nearly 40% mentioned that lifecycle management can be very time-consuming. For many, the high cost of specialized PKI solutions is a barrier.<\/p>\n

\"What
\n
\nOur survey revealed that many companies still rely on their own internal certificate authorities, despite the burden it places on the organization's IT resources.<\/p>\n

The study also indicated a rise in the use of digital signatures. More than 50% of survey participants stated that they actively use digital signatures to ensure the integrity and authenticity of content.<\/p>\n

\"What
\n
\nRegarding why they chose digital signatures, 53% of respondents said that compliance with regulations was the main reason, while 60% pointed to the adoption of paperless technologies. One of the main reasons for the shift to digital signatures is time savings. Additionally, the ability to reduce document processing times is one of the key advantages of using PKI technology.<\/p>\n

Encryption in DevOps<\/h2>\n

\nThe study wouldn't be complete without asking respondents about the use of encryption systems in DevOps \u2014 a rapidly growing market projected to reach $13 billion by 2025. Although the IT market swiftly transitioned to the DevOps methodology (development + operations) with its automated business processes, flexibility, and Agile approaches, these methods also pose new security risks. Currently, the process of obtaining certificates in a DevOps environment is complex, labor-intensive, and prone to errors. Here are the challenges developers and companies face:<\/p>\n