Harden DRM & Conditional Access

In-Depth Content Protection

Resources

WMDRM Robustness Rules

Open Cable Robustness Rules

OMA Robustness Rules

TransformIT™ - Data Sheet

Some examples of threats to the digital media ecosystem and associated revenue include:

Reverse-engineering applications to unravel proprietary algorithms, such as watermarking

Reverse-engineering platforms, for example to spoof authentication

Discovering secret keys to decrypt a title or an entire library

Tampering to disable security functions such as biometric authentication

Tampering to unlock subsidized devices such as media gateways or high-end gaming platforms

Discovering secret keys to decrypt a title or an entire library

Generation of class hacks or BORE (break once run everywhere) attacks that allow any average user to quickly unlock all controlled content. These are particularly virulent when they are constructed not just for your application, but for the protection technology you use to secure it!

Although your protection strategy may include Digital Rights Management (DRM) and/or Conditional Access Systems (CAS) technology, such as digital watermarking, digital fingerprinting, a determined professional hacker with unlimited time represents an on-going threat. Hence, these technologies, alone, are no longer enough to protect digital content from threats since:

• DRM software itself is subject to reverse-engineering, tampering, and automated attacks.
• Playback applications leverage third party modules which must collectively be trustworthy to effectively secure the content.
• Protection needs for diverse business models extend beyond simple usage metering
• In-house solutions to fortify and individualize DRM or CA applications are extremely expensive to develop, implement, maintain and… most importantly… to renew.

Furthermore, as internet technologies, such as IPTV, enable multimedia PC-platforms to compete for premium content against single-purpose devices, your security solution must address traditional threats of unauthorized access and use and intellectual property theft, but also incorporate threats of an open-platform, such as malware attacks.

To address your need for effective and non-invasive security, Arxan provides a defense-in-depth approach to digital media security. Arxan’s security solution encompasses multiples layers of defense and meets the requirements of robustness rules, including the ability to provide renewability of protection without compromising end-user experience.

Arxan’s GuardIT provides a first and deep layer of protection, with various Guards that continuously, yet transparently fortify DRM or CA applications and tightly bind the overall security to the content so that multiple layers of defense are achieved. Arxan’s Guards are fully contained within an application and only fire if attacks are detected, so honest users’ experience remains unchanged. No modification of the end user system is necessary to meet your security goals.

Arxan’s application hardening solution is:

• Fully automated, binary-based protection solution that doesn’t require any modification of source code
• Inserted in minutes, and can be scripted into your nightly builds
• Streamlined, providing strong, point-click breach management that allows you to restructure and renew your protection quickly and effectively
• Fast and easy for any customization or application requirements and application individualization is automated
• Performance sensitive as Guard technology allows separation of the protection execution from the protection target without compromising level of security. Even the most performance-sensitive functions can be protected against tampering and code-lifting
• Optimal when used with TransformIT, Arxan’s software-based key protection solution

Arxan experts are deeply knowledgeable in robustness rules and conformance criteria, and are experienced in helping companies implement and test robust protections. Arxan security experts also constantly monitor hacker techniques, and continually enhance our Guard library to keep you ahead of the pirates.

Contact us for more information on your digital media security needs.