Cryptographic Discovery and Inventory: The Hidden Foundation for Enterprise Security
summary
Compares three practical discovery strategies—targeted scanning / network tracing / deep system scans—and a fourth option of integrating existing cyber tools, mapping each to US‑NIST and CISA use cases for PKI automation and post‑quantum readiness. Presents concrete findings: 140,686 certs on a MacBook, up to 500,000 assets per Windows device, and shows a discovery framework and dashboard that supports continuous monitoring, inventory reconciliation, and mitigation planning for the 47‑day certificate renewal challenge. Notes legacy systems, supply‑chain silos, and limits of current code‑scanning for crypto agility.
AI-written summary · about
chapters (12)
- 0:00Introduction
- 1:10Speaker motivation
- 3:00Regulatory timelines for PQC
- 4:46Enterprise silos
- 8:22Discovery approaches
- 13:21Deep system scanning
- 16:08Crypto inventory scale
- 18:00Legacy migration challenges
- 20:53AI in discovery
- 21:37Risk and trust analysis
- 23:44Continuous monitoring
- 24:04Q&A
related talks
12mKeyfactor on Cryptographic Discovery: Why Knowing What You Have Is Step One
21mCryptography at Scale: Building a Practical Cryptographic...
25mCrypto Asset Discovery Tooling – an Overview of Capabilities, Characteristics and Gaps
28mFinal Q&A
49mHerding Certs - How to Automate Certificate Management
44mQuantum Cyber Risk: How Deep and How Wide?
33mComparing Strategies for Quantum-Safe Cryptography Adoption in Organizations
41mThe Divine and Felonious Nature of Cyber Security