HP announces "the world's most secure printers" and promises security upgrades to older machines
Unprotected enterprise printers can pose serious security vulnerability, claims LaserJet GM
HP today announced new hardware and software designed to battle one of the biggest potential security holes in any IT network, the printer.
"Hackers target the weakest area of the network," said Tuan Tran, vice president and general manager of HP's LaserJet division, at the launch event in Barcelona.
"They don't go through the most obvious vector of attack, the front door [such as well-protected servers and PCs], they go for the back door."
Up until now, Tran claims, the back door has been the likes of the heating and ventilation system or point-of-sale devices, with Target the highest-profile victim of the latter when 40 million customers had sensitive data such as credit card details hacked.
But Tran insists the same applies to printers - particularly those in enterprises, which increasingly tend to be hooked up to corporate networks and accessible via the cloud.
HP's answer is a trio of hardware and software features built into its new M500 series printers, with two of the three features being rolled out to HP's older printers via firmware updates. Printers dating back to 2011 will be covered, with a full list at the end of this article.
The one security feature that won't be available to older machines is HP Sure Start, which depends on a "golden" BIOS that's separate to the printer's active BIOS. If, at the time of booting, the printer detects its BIOS has been compromised it will roll back automatically to the original.
Get the ITPro. daily newsletter
Receive our latest news, industry updates, featured resources and more. Sign up today to receive our FREE report on AI cyber crime & security - newly updated for 2024.
The second new line of defence is whitelisting, which should ensure that only "good" firmware can be loaded and executed on the printer. If it detects non-HP firmware it shuts down and notifies the network manager.
Run-time intrusion detection rounds off the features, with constant monitoring of in-device memory that checks for attacks. Crucially for IT managers in charge of dozens of printers in different places, the printer reboots automatically.
New HP LaserJet M500-series printers
HP announced three new printers: the HP LaserJet M506 will be available from 1 October, while the HP LaserJet Enterprise MFP M527 and HP Color LaserJet Enterprise MFP M577 go on sale from 2 November.
All three printers benefit from the same advantages seen in other HP laser launches this year, with smaller chassis design, faster first-page-to-print speeds and up to 50 per cent more pages per cartridge.
For instance, the M506 produces a first print in 8.5 seconds when in sleep mode, while it's 27 per cent smaller than the printer it replaces (the HP P3015). Despite the smaller chassis, it includes a 550-sheet input tray and full duplex capability.
No pricing is yet available for any of the new printers.
Full list of printers to be protected:
M501, M502, M503, M506, M525, M527, M551, M552, M553, M575, M577, M604, M605, M630, M651, M680, M712, M725, M750, M775, M806, M830, M855, M880, X555, X585.
Find out how HP's new LaserJet printers can help your business.
Tim Danton is editor-in-chief of PC Pro, the UK's biggest selling IT monthly magazine. He specialises in reviews of laptops, desktop PCs and monitors, and is also author of a book called The Computers That Made Britain.
You can contact Tim directly at editor@pcpro.co.uk.