Crypto Asset Discovery Tooling – an Overview of Capabilities, Characteristics and Gaps
summary
Research run from early 2024 produces a prototype Cryptographic Asset Discovery (CAD) project and a nine‑level maturity model; the practical minimum is levels 1–2 MVP requiring CBOM ingestion plus network and static filesystem scanning, with agent or passive scans as options. Vendor landscape shows a few tools that “come close” but persistent OT blind spots, exaggerated vendor accuracy claims, and reinvention instead of reusing existing agents and security platforms leave gaps to close.
AI-written summary · about
chapters (11)
- 0:00Welcome
- 1:47Why crypto discovery matters
- 3:13What crypto discovery involves
- 5:23CAD project objectives
- 7:10Research methodology
- 9:36Ideal vs MVP tools
- 11:24Maturity model
- 13:51Tool scope comparison
- 15:37Gaps in discovery tooling
- 17:46Key takeaways
- 18:28Q&A
related talks
29mCryptographic Discovery and Inventory: The Hidden Foundation for Enterprise Security
21mCryptography at Scale: Building a Practical Cryptographic...
12mKeyfactor on Cryptographic Discovery: Why Knowing What You Have Is Step One
27mCrypto Agility How it’s both a Critical Component and a Complex Challenge
28mFinal Q&A
45mThe Magnetic Pull of Mutable Protection: Worked Examples in Cryptographic Agility
30mInvestigating Post-Quantum Cryptography: building a PQC decision tree for developers
27mScaling Trust: CLM Roadblocks on the Path to Post Quantum Resilience