https://www.americancityandcounty.com/wp-content/themes/acc_child/assets/images/logo/footer-logo.png
  • Home
  • Co-op Solutions
  • Commentaries
  • News
  • In-Depth
  • Multimedia
    • Back
    • Podcast
  • Resources
    • Back
    • Resources
    • Webinars
    • White Papers
    • Events
    • How to Contribute
    • Municipal Cost Index – Archive
    • Equipment Watch Page
    • American City & County Awards
  • Magazine
    • Back
    • Digital Editions
    • Reprints & Reuse
    • Advertise
  • About Us
    • Back
    • About Us
    • Contact Us
    • Privacy Statement
    • Terms of Service
American City and County
  • NEWSLETTER
  • Home
  • Co-op Solutions
  • Commentaries
  • News
  • In-Depth
  • Multimedia
    • Back
    • Podcasts
  • Resources
    • Back
    • Webinars
    • White Papers
    • Events
    • How to Contribute
    • American City & County Awards
    • Municipal Cost Index
    • Equipment Watch Page
  • Magazine
    • Back
    • Digital Editions
    • Reprints & Reuse
    • Subscribe to GovPro
    • Manage GovPro Subscription
    • Advertise
  • About Us
    • Back
    • About Us
    • Contact Us
    • Cookie Policy
    • Privacy Stament
    • Terms of Service
  • newsletter
  • Administration
  • Economy & Finance
  • Procurement
  • Public Safety
  • Public Works & Utilities
  • Smart Cities & Technology
acc.com

Smart Cities & Technology


Commentary

Reforming secure shell key management: A primer for local governments (with related video)

Reforming secure shell key management: A primer for local governments (with related video)

Tatu Ylönen, CEO and founder of SSH Communications Security, says today’s rapidly evolving threatscape is forcing governments to reconsider how to manage their secure shell environments.
  • Written by Tatu Ylönen
  • 18th July 2013

Since its inception, the secure shell (SSH) data-in-transit protocol has been used by every type and size of government to secure data as it moves throughout the network environment. Secure shell has safeguarded billions of government data transactions without being compromised. But while the protocol itself is highly secure, today’s rapidly evolving threatscape is forcing governments to reconsider how to manage their secure shell environments.

Local governments use secure shell most often to transfer substantial amounts of sensitive information within the network environment, including personally identifiable information, healthcare records, credit card numbers and other sensitive information often found in government files.

With the increase in advanced threat vectors, it is more imperative than ever that local governments implement proper secure shell key management protocols. The more governments deviate from a best practices approach to secure shell key management, the higher the risk is to the network and its users.

Best practices for properly managing secure shell environments include:
•    Automating key setups and key removals, thereby eliminating manual work and human errors,
•    Discovering all existing users and public and private keys, and mapping trust between machines and users,
•    Enforcing proper approvals for all key setups,
•    Monitoring the environment to determine which keys are actually used and removing keys no longer in use,
•    Restricting where each key has access and what commands can be executed using the key, and
•    Rotating keys regularly, so that copied keys cease to work and proper termination of access can be ensured

While secure shell is the benchmark for data-in-transit security, the current threat landscape requires local governments to rethink how they are managing access to their encrypted networks. Best security practices like the ones identified above will position local governments to prepare for security threats and new compliance mandates before they occur.

Tatu Ylönen is the CEO and founder of SSH Communications Security. While working as a researcher at Helsinki University of Technology, Ylönen began working on a solution to combat a password-sniffing attack that targeted the university’s networks. What resulted was the development of the secure shell (SSH), a security technology that would quickly replace vulnerable rlogin, TELNET and rsh protocols as the standard for data-in-transit security.

Ylönen has been a driver in the emergence of security technology, including SSH & SFTP protocols. He is a co-author of globally recognized IETF standards. He has been with SSH since its inception in 1995, holding various roles including CEO, CTO and as a board member.  He holds a Master of Science degree from the Helsinki University of Technology.

SSH Communications Security is based in Helsinki, Finland. The firm has an office in Waltham, Mass.

Tatu Ylönen discusses SSH key management in this video.

Tags: Smart Cities & Technology Commentary

Related


  • 2020 Crown Communities winner: Harris County, Texas, Precinct 2's ACCESS2HEALTH SmartPod
    Precinct 2 of Harris County, Texas, implemented a medical college’s innovative epidemiological technology to bring COVID-19 testing to its vulnerable residents. However, the precinct’s initiative and this technology could influence pandemic response across the country. Of all four precincts in Harris County, Texas, Precinct 2 has the lowest median life expectancy, the highest percentage of […]
  • American City & County’s 2020 Crown Communities Awards
    Projects nominated for American City & County's annual Crown Communities Awards are judged on uniqueness, short- and long-term value to the community and effective/innovative financing.
  • 2020 Crown Communities winner: Rock Hill, S.C.'s My Ride
    Rock Hill, S.C.’s My Ride project is a great example of how a city can solve multiple issues with one innovative project. My Ride is an all-electric, fare-free, fixed-route bus system that operates within Rock Hill (pop. 75,000). Seven electric buses ferry passengers over four routes that span across major corridors in the city. The […]
  • COVID-19 and pivoting into a new year: It may be 2021, but did we really leave 2020?
    As we continue to navigate 2021, many issues will require continued tech leadership and support to carry everyone through

Leave a comment Cancel reply

-or-

Log in with your American City and County account

Alternatively, post a comment by completing the form below:

Your email address will not be published. Required fields are marked *

Related Content

  • Tyler Technologies to acquire NIC
  • The future of transportation – leveraging smart solutions to boost user experience
  • Hackers attempt to poison water supply in Florida town
  • Bridging the digital divide by fostering digital inclusion and economic recovery

White papers


Discover How Public Sector Officials are Monitoring and Managing Overtime in This New White Paper

22nd February 2021

How to Assemble a Successful Government Grant Proposal

5th February 2021

The Rise of Procurement’s Next Normal

5th February 2021
view all

Events


PODCAST


Young Leaders Episode 4 – Cyril Jefferson – City Councilman, High Point, North Carolina

13th October 2020

Young Leaders Episode 3 – Shannon Hardin – City Council President, Columbus, Ohio

27th July 2020

Young Leaders Episode 2 – Christian Williams – Development Services Planner, Goodyear, Ariz.

1st July 2020
view all

Twitter


AmerCityCounty

Why Tucson is building its own 4G network dlvr.it/RvDxK0

8th March 2021
AmerCityCounty

Key Steps Governments Can Take to Guard Against Malware Attack dlvr.it/RvCr2x

8th March 2021
AmerCityCounty

2020 Crown Communities winner: El Paso County, Texas’ pretrial justice modernization dlvr.it/Rv4GKL

6th March 2021
AmerCityCounty

A city’s innovative downtown master plan sees future in local, inclusive placemaking dlvr.it/Rv3SfM

5th March 2021
AmerCityCounty

2020 Crown Communities winner: Gainesville, Fla. closes Dignity Village and houses its homeless population dlvr.it/Rv1GS2

5th March 2021
AmerCityCounty

2020 Crown Communities Winner: South Bay Cities Council of Governments’ South Bay Fiber Network dlvr.it/Rv10b7

5th March 2021
AmerCityCounty

Senate American Rescue Plan includes more than $60 million in direct aid for counties dlvr.it/RtzvBK

4th March 2021
AmerCityCounty

ASCE releases 2021 Report Card for America’s Infrastructure dlvr.it/Rtvck5

3rd March 2021

Newsletters

Sign up for American City & County’s newsletters to receive regular news and information updates about local governments.

Resale Insights Dashboard

The Resale Insights Dashboard provides model-level data for the entire used equipment market to help you save time and money.

Municipal Cost Index

Updated monthly since 1978, our exclusive Municipal Cost Index shows the effects of inflation on the cost of providing municipal services

Media Kit and Advertising

Want to reach our digital audience? Learn more here.

DISCOVER MORE FROM INFORMA TECH

  • IWCE’s Urgent Communications
  • IWCE Expo

WORKING WITH US

  • About Us
  • Contact Us

FOLLOW American City and County ON SOCIAL

  • Privacy
  • CCPA: “Do Not Sell My Data”
  • Cookies Policy
  • Terms
Copyright © 2021 Informa PLC. Informa PLC is registered in England and Wales with company number 8860726 whose registered and Head office is 5 Howick Place, London, SW1P 1WG.
This website uses cookies, including third party ones, to allow for analysis of how people use our website in order to improve your experience and our services. By continuing to use our website, you agree to the use of such cookies. Click here for more information on our Cookie Policy and Privacy Policy.
X