Can an attacker get in?
Protects systems, devices, networks, credentials and information from unauthorised access or attack.
Start a conversationEviState Core / AES
Security is not only about keeping attackers out
It is also about making it difficult for anyone to make something false look genuine
EviState Core is designed to strengthen the evidence surrounding digital events—their origin, sequence, relationships and continuity—so that trust does not have to depend upon a single system, signal or assertion.
Two different questions
Cybersecurity protects the system
Evidential security strengthens what can be established
Can an attacker make something false appear genuine?
Strengthens the origin, continuity, relationships and independent corroboration of the evidence surrounding a digital event.
AES does not replace cybersecurity. It addresses a different part of the trust problem.
Multidimensional evidence
One signal can be compromised
The evidence does not have to depend on one signal
EviState Core brings together multiple dimensions of evidence so that confidence does not have to rest upon any one of them alone.
EviState CoreAESExaminable history
OROriginWhere it came from
IDIdentityWho or what was involved
TMTimeWhen it occurred
CHChannelHow it was communicated
CTContinuityWhat came before and after
RLRelationshipHow events and entities connect
COCorroborationIndependent supporting evidence
VRVerificationHow it can be examined
CybersecurityCan they get in?
+Protects the system
Evidential securityCan they make something false look genuine?
Protects our ability to establish what happened
V
A single line of trust
Message sent→Message received
If that one line is compromised, trust can collapse.
AES creates a network of evidence
OriginIdentityAESTimeContinuity
One signal can be compromised
The wider evidence remains examinable
The remaining dimensions stay available for examination and challenge.
Beyond the perimeter
Security is more than encryption
Encryption can protect information in transit or at rest. But after information has been received, copied, forwarded, exported or presented as evidence, another question remains:
Can we establish what actually happened?
EviState Core is concerned with that evidential question.
No single point of trust
No single signal should carry all the trust
A password, account, device, channel or record can be compromised. EviState Core is designed so that confidence does not have to depend upon any one of them alone.
01Origin02Identity03Time04Continuity05Relationships06Corroboration07Verification
Protecting the history
A genuine event has a history
EviState Core is designed to preserve evidence of how an event relates to what came before it, what followed it and the independent evidence surrounding it.
Origin→Event→Continuity→Corroboration→Verification
When systems fail
One compromised component should not automatically compromise the evidence
Digital systems will sometimes fail or be compromised. The important question is what can still be independently established afterwards.
EviState Core is designed to preserve and correlate evidence across appropriate sources so that compromise of one component does not necessarily allow an attacker to manufacture a convincing history across the entire evidential environment.
Security across channels
Trust should not disappear when the channel changes
EviState Core is designed to preserve evidential continuity across supported channels rather than treating each channel as an isolated trust environment.
Email→SMS→Messaging→Records→Other digital systems
See cross-channel continuity demonstrated →Designed for changing threats
Security changes
The evidence model should not have to start again
Security controls and technical standards evolve as capabilities and threats change. EviState Core separates the public evidence model from any single implementation mechanism.
This is an architectural boundary, not a claim that a particular future security standard has already been implemented or audited.
The operating principle
Don’t ask us to trust the claim
Examine the evidence
Important claims should be capable of independent examination rather than requiring blind trust in the organisation making them.