Isbn: 9798171322830 - cryptographic key management in practice: protect the full lifecycle of keys from creation to rotation and revocation (5 risultati)

PAP. Condizione: New. New Book. Shipped from UK. Established seller since 2000.

PAP. Condizione: New. New Book. Shipped from UK. Established seller since 2000.

Paperback. Condizione: new. Paperback. Your encryption can be strong and your system can still be vulnerable.A database may be encrypted. A master secret may live inside an HSM. Automatic replacement may be enabled. Access may be logged. But none of those controls answers the questions that ultimately determine whether sensitive data remains secure: Who can actually decrypt it? What happens when credentials are compromised? Can old data survive a replacement? What happens when a cloud provider is unavailable? Can an organization prove where its most important cryptographic assets are used?Cryptographic Key Management in Practice is a practical guide to building the systems behind trustworthy encryption, signing, identity, cloud security, and modern digital infrastructure.Rather than focusing on mathematical derivations, this book shows developers, security engineers, cloud professionals, DevOps and SRE teams, architects, and technical leaders how cryptographic controls work throughout real production environments.You'll learn how to: Build secure hierarchies using DEKs, KEKs, envelope encryption, KMS platforms, and HSMsChoose appropriate boundaries for software, hardware-backed, cloud-hosted, and externally controlled assetsSeparate possession from permission and enforce least privilege around sensitive operationsReplace active material without breaking applications or losing access to historical dataPrepare for compromise, emergency response, recovery, destruction, and cryptographic erasureUse workload identities, separation of duties, policy automation, and audit evidenceArchitect cloud-native environments across Kubernetes, CI/CD systems, multiple regions, and multiple providersEvaluate BYOK, HYOK, external control, sovereignty, and vendor-exit requirementsBuild inventories and governance systems that remain useful as infrastructure changesPrepare applications for crypto agility and the transition toward post-quantum standardsRealistic case studies show how apparently secure systems fail through overprivileged identities, version pinning, untested recovery, weak signing workflows, excessive centralization, and incomplete dependency maps.The book concludes with a professional review playbook and a practical learning path that turns the concepts into repeatable architecture, migration, incident-response, and assurance workflows. This item is printed on demand. Shipping may be from multiple locations in the US or from the UK, depending on stock availability.…

Condizione: New. Print on Demand.

Paperback. Condizione: new. Paperback. Your encryption can be strong and your system can still be vulnerable.A database may be encrypted. A master secret may live inside an HSM. Automatic replacement may be enabled. Access may be logged. But none of those controls answers the questions that ultimately determine whether sensitive data remains secure: Who can actually decrypt it? What happens when credentials are compromised? Can old data survive a replacement? What happens when a cloud provider is unavailable? Can an organization prove where its most important cryptographic assets are used?Cryptographic Key Management in Practice is a practical guide to building the systems behind trustworthy encryption, signing, identity, cloud security, and modern digital infrastructure.Rather than focusing on mathematical derivations, this book shows developers, security engineers, cloud professionals, DevOps and SRE teams, architects, and technical leaders how cryptographic controls work throughout real production environments.You'll learn how to: Build secure hierarchies using DEKs, KEKs, envelope encryption, KMS platforms, and HSMsChoose appropriate boundaries for software, hardware-backed, cloud-hosted, and externally controlled assetsSeparate possession from permission and enforce least privilege around sensitive operationsReplace active material without breaking applications or losing access to historical dataPrepare for compromise, emergency response, recovery, destruction, and cryptographic erasureUse workload identities, separation of duties, policy automation, and audit evidenceArchitect cloud-native environments across Kubernetes, CI/CD systems, multiple regions, and multiple providersEvaluate BYOK, HYOK, external control, sovereignty, and vendor-exit requirementsBuild inventories and governance systems that remain useful as infrastructure changesPrepare applications for crypto agility and the transition toward post-quantum standardsRealistic case studies show how apparently secure systems fail through overprivileged identities, version pinning, untested recovery, weak signing workflows, excessive centralization, and incomplete dependency maps.The book concludes with a professional review playbook and a practical learning path that turns the concepts into repeatable architecture, migration, incident-response, and assurance workflows. This item is printed on demand. Shipping may be from our UK warehouse or from our Australian or US warehouses, depending on stock availability.…