(U) High Assurance Internet Protocol Encryptor (HAIPE ) JCMO
|
|
|
- Angel Kelley
- 6 years ago
- Views:
Transcription
1 (U) High Assurance Internet Protocol Encryptor (HAIPE ) JCMO December, 2010 Mike Irani SPAWAR Systems Center Pacific irani@spawar.navy.mil (U) This information is not approved for public disclosure or redistribution without prior approval by NSA.
2 (U) Overview (U) HAIPE Overview (U) HAIPE Key Management Concepts EKMS and pre-kmi HAIPE Interim Solutions HAIPE and KMI (U) Current Initiatives (U) Products 8 DEC
3 (U) The HAIPE Program Office (U) The mission of the HAIPE PO is to ensure interoperability between HAIPE implementations by specifying requirements and verifying compliance through demonstration, test, analysis, and inspection Development and configuration management of the HAIPE documents Development, configuration management, and deployment of the HAIPE Interoperability Test Tool (HITT) Embedded implementation developers must provide test harness/rig Operation of the HAIPE Interoperability Test Facility SPAWAR Systems Center Pacific (San Diego, CA) Interoperability not Interchangeability 8 DEC
4 (U) HAIPE PO development process (U) Interoperability specification development based on solicited user requirements and current/near future technology trends (U) Vendor implementation based on market segment and user community needs (U) HAIPE interoperability testing ensures compliance with the HAIPE IS core and extensions (U) Vendor-to-vendor testing ensures interoperability across multiple vendors with similar capabilities (U) Product certified for the protection of National Security Sensitive information HAIPE IS Development Vendor Implementation HAIPE Interoperability Testing Vendor-to-Vendor Testing NSA Product Certification 8 DEC (U)
5 (U) What is the HAIPE Product Cycle? Key Activities Community Buy-In HAIPE PMO Resources Evaluator Review Product Cycle Specification User Demand Funding Evaluator Certification Product Purchase & Integration Configuration Guidance System Accreditation Implementation Deployment 8 DEC
6 (U) Evolution of HAIPE Products (U) HAIPIS Compliant Products (U) HAIPE IS 3.X Compliant Products (U) HAIPIS resulted in development of primarily gateway based devices. (U) HAIPE IS 3.X is modular to enable development of a wide variety of devices Network Gateway Host/Embedded application 8 DEC
7 (U) HAIPE IS Hierarchy (U//FOUO) The HAIPE Interoperability Specification is a set of documents that contains all HAIPE feature interoperability requirements (The HAIPE IS is not a product specification) Core features (mandatory for all implementations) Extension features (mandatory for some implementations) Multiple cryptographic suites Suite A (U.S., second party) Suite B (high risk of compromise, third party, and commercial) Legacy (backwards compatibility) Gateway HAIPE IS Core Generic Discovery Client (U) 8 DEC
8 (U) Current HAIPE Key Products (U//FOUO) Suite A EFF vector (EFF exchange) In 5 DePAC (US, Coalition, CCEB, NATO, NATO Nations) CKL PPK (U//FOUO) Suite B EFF vector (MQV exchange) In 5 DePAC (US, Coalition, CCEB, NATO, NATO Nations) CKL APPK (U//FOUO) Device Keys S^2 (change software signature) P^3 (change DePAC) Q^2 (future change APPK trust anchor) 8 DEC
9 (U) HAIPE Key Products Delivery Today (U//FOUO) EFF, PPK, APPK, P^3 and Q^2 Fax or call order Central Facility (CF) generated to Message Server (MS) Call for LMD to MS (or STE transfer to Data Transfer Device (DTD)) LMD decrypts Bulk Encrypted Transaction (BET) LMD transfer to DTD DTD file HAIPE (U//FOUO) PPK Generated at Key Processor (KP) LMD transfer to DTD DTD to HAIPE Note: 1. PPK, APPK, P^3, Q^2 generated at Fort Meade transferred to CF to MS 2. S^2 generated a Fort Meade and delivered on physical media only 3. PPK can be generated at KP or Fort Meade 4. APPK, S^2, P^3 and Q^2 must be called into Fort Meade 5. HAIPE IS 3.1 allows key to be loaded at one HAIPE and transferred to another HAIPE for consumption 8 DEC
10 (U) HAIPE -to-haipe Key Transfer (HAIPE 3.1) 8 DEC
11 (U) H2HKT Modes (U) Key material can be transferred using in-band and out-ofband modes In-band supports the delivery of symmetric key material only Out-of-band supports symmetric and asymmetric (U) Authentication and depac operations are performed at the client 8 DEC
12 (U) HAIPE and KMI (U) HAIPEs are expected to be a major consumer of KMI products. (U) HAIPE 4.1 extension adds requirement for KMI/OTNK KMI 3301 describes HAIPE extension for OTNK (U) Additional work needed in determining delivery options for those device not able to connect to PDE. Disconnected nodes KMI Aware, non-pde enabled. 8 DEC
13 (U) Current Developments (U) HAIPE version Added IKEv2, ECDH Added Dynamic Multicast Group Creation (U) Participating in Corporate Initiatives GOTS Secret and Below Cryptographic High Valued Product (CHVP) IPMEIR Interoperability with CIS Suite B (U) Over 140,000 products fielded over 10 years (U) User input still influencing feature evolution 8 DEC
14 (U) HAIPsec High Assurance IPSec (HAIPSEC) IKEv2 RFC4306 ESPv3 RFC4303 Suite B RFC 4869 HAIPE Interoperability Core and Extensions (CLASSIFIED) IPSec Minimal Essential Interoperability Requirements (IPMEIR) (UNCLASSIFIED) 8 DEC
15 (U) Interoperability Model US Traditional HAIPE A&B IPMEIR NATO HAIPE B US DHS Commercial IPMEIR WAN IPMEIR IPMEIR HAIPE A&B IPMEIR Coalition CCEB 8 DEC
16 (U) Challenges (U) Keying Infrastructures Alignment (U) Interoperability Testing (U) Beyond the US 8 DEC
17 (U) HAIPE product schedule HAIPIS Basic Cryptographic Interoperability L3 KG-240 KG-245 KG-245X ViaSat KG-250,A KG-255 GD KG-175 Classic, E100,A,& B FY06 L3 Talon GD KG-175D KG-175R SAFENET CHIP 3340 ViaSat KG-250 Harris KIV-54 FY07 Harris Falcon III ViaSat BGAN/IT Myko KIV-7MiP L3 KG-245A HAIPE IS Common Management Improved Overhead IPv6 GD SME-PED (IPv4 subset) FY08 L3 KG-240A KG-245A & X SME-PED (IPv4 subset) GD KG-175D KG-176 Myko KIV-7MiP ViaSat KG-250,A,M,T FY09 HAIPE IS 3.1.x HAIPE-to-HAIPE Re-keying Non-Gateway Devices (client) HAIPIS Compliant Product HAIPE FI Compliant Product HAIPE IS 3.0 Compliant Product HAIPE IS 3.1 Compliant Product L3 KG-240A KG-245A GD KG-175D KG-175A, B,R ViaSat KG-250,A. M, T KG-255 FY10 FY11 8 DEC
18 (U) Questions? December, 2010 Mike Irani SPAWAR Systems Center Pacific (U) This information is not approved for public disclosure or redistribution without prior approval by NSA.
National Policy Governing the Use of High Assurance Internet Protocol Encryptor (HAIPE) Products
Committee on National Security Systems CNSS Policy No. 19 February 2007 National Policy Governing the Use of High Assurance Internet Protocol Encryptor (HAIPE) Products This document prescribes minimum
White paper. Combatant command (COCOM) next-generation security architecture
Combatant command () next-generation security architecture using NSA Suite B Table of Contents Combatant command () next-generation security architecture using NSA Suite B NSA Commercial Solution for Classified
Managed Security Service National Security Information (MSS-NSI)
Managed Security Service National Security Information (MSS-NSI) 16.1 AT&T MSS-NSI Overview AT&T will provide management, installation, operations, maintenance and upgrade services for U.S Government-owned,
GSAW Information Assurance in Government Space Systems: From Art to Engineering
GSAW 2006 Information Assurance in Government Space Systems: From Art to Engineering Charles Lavine The Aerospace Corporation 310-336-1595 lavine@aero.org 1 Toward the Global Information Grid Toward the
UNCLASSIFIED. Exhibit R-2, RDT&E Budget Item Justification Date February 2007 Appropriation/Budget Activity RDT&E Defense-Wide, BA 7
Exhibit R-2, RDT&E Budget Item Justification Date February 2007 Appropriation/Budget Activity RDT&E Defense-Wide, BA 7 R-1 Item Nomenclature: Net Centricity PE 0305199D8Z Cost ($ in millions) FY 2006 FY
The SafeNet Security System Version 3 Overview
The SafeNet Security System Version 3 Overview Version 3 Overview Abstract This document provides a description of Information Resource Engineering s SafeNet version 3 products. SafeNet version 3 products
INFORMATION ASSURANCE DIRECTORATE
National Security Agency/Central Security Service INFORMATION ASSURANCE DIRECTORATE CGS Key Management Key Management is a service and process that provides, controls, and maintains the cryptographic keys,
Secure Delay Tolerant Networking Using SBSP and IPMEIR Enabling Security, Resiliency, and Cost Savings for Space Mission Communications
Secure Delay Tolerant Networking Using SBSP and IPMEIR Enabling Security, Resiliency, and Cost Savings for Space Mission Communications Presented by: Assi Friedman Authored by: Assi Friedman Innoflight,
What is Suite B? How does it relate to Government Certifications?
What is Suite B? How does it relate to Government Certifications? Agenda What are we going to do? Who am I? A little background on Suite-B. Suite-B: What s covered. How does Suite-B relate to your favorite
DoD Identity & Access Management (IdAM) Portfolio Overview
DoD Identity & Access Management (IdAM) Portfolio Overview UNCLASSIFIED DISA Enterprise Services Directorate (ESD) 17 July 2013 Overview IdAM Concepts & IdAM Portfolio 7/15/13 UNCLASSIFIED 1 IdAM Overview
About FIPS, NGE, and AnyConnect
About FIPS, NGE, and AnyConnect, on page 1 Configure FIPS for the AnyConnect Core VPN Client, on page 4 Configure FIPS for the Network Access Manager, on page 5 About FIPS, NGE, and AnyConnect AnyConnect
AnyConnect Secure Mobility Client for Windows 10
National Information Assurance Partnership Common Criteria Evaluation and Validation Scheme Validation Report Cisco Systems, Inc. 170 West Tasman Dr. San Jose, CA 95134 AnyConnect Secure Mobility Client
Understanding Data Link Gateway Challenges
Understanding Data Link Gateway Challenges TDL Summit November 2018 Introduction Technology improvements allow new technology radios to be deployed in shorter periods of time than past history Gateway
Secure Government Computing Initiatives & SecureZIP
Secure Government Computing Initiatives & SecureZIP T E C H N I C A L W H I T E P A P E R WP 700.xxxx Table of Contents Introduction FIPS 140 and SecureZIP Ensuring Software is FIPS 140 Compliant FIPS
DoD Internet Protocol Version 6 (IPv6) Contractual Language
DoD Internet Protocol Version 6 (IPv6) Contractual Language 1. Purpose: Contents of this document shall be incorporated in Government Acquisition Programs, Procurements, Services, and Contracts (including
UNCLASSIFIED CPA SECURITY CHARACTERISTIC IPSEC SECURITY GATEWAY. Version 1.1. Crown Copyright 2011 All Rights Reserved
13951018 CPA SECURITY CHARACTERISTIC IPSEC SECURITY GATEWAY Version 1.1 Crown Copyright 2011 All Rights Reserved CPA Security Characteristics for IPsec Security Gateway Document History [Publish Date]
SENETAS ENCRYPTION KEY MANAGEMENT STATE-OF-THE-ART KEY MANAGEMENT FOR ROBUST NETWORK SECURITY
SENETAS ENCRYPTION KEY MANAGEMENT STATE-OF-THE-ART KEY MANAGEMENT FOR ROBUST NETWORK SECURITY WHO SHOULD READ THIS DOCUMENT System Integrators, Cloud and Data Centre Service Providers, Layer 2 Data Networks
University of Sunderland Business Assurance PCI Security Policy
University of Sunderland Business Assurance PCI Security Policy Document Classification: Public Policy Reference Central Register IG008 Policy Reference Faculty / Service IG 008 Policy Owner Interim Director
1) Revision history Revision 0 (Oct 29, 2008) First revision (r0)
To: INCITS Technical Committee T10 From: David L. Black, EMC Email: black_david@emc.com Date: October 29, 2008 Subject: SPC-4: Digital Signature Authentication (08-423r0) 1) Revision history Revision 0
Committee on National Security Systems. CNSS Policy No. 14 November 2002
Committee on National Security Systems CNSS Policy No. 14 November 2002 National Policy Governing the Release of Information Assurance (IA) Products and Services to Authorized U.S. Persons or Activities
PIN Security Requirements
Payment Card Industry (PCI) PIN Security Requirements PCI SSC Modifications Summary of Significant Changes from v2.0 to v3.0 August 2018 PCI SSC Modifications to PCI PIN Security Requirements In the table
Payment Card Industry (PCI) Point-to-Point Encryption
Payment Card Industry (PCI) Point-to-Point Encryption Solution Requirements and Version 2.0 (Revision 1.1) July 2015 Document Changes Date Version Revision Description 14 September 2011 1.0 Initial release
COMBINED FEDERATED BATTLE LABORATORIES NETWORK (CFBLNet)
UNCLASSIFIED COMBINED FEDERATED BATTLE LABORATORIES NETWORK (CFBLNet) PUBLICATION 1 ANNEX C CFBLNET SECURITY AND INFORMATION ASSURANCE STRATEGY Version 8.0 July 2015 UNCLASSIFIED DOCUMENT CONTROL AND TRACKING
Key Management Interoperability Protocol (KMIP)
www.oasis-open.org Management Interoperability Protocol (KMIP) April 2 nd, 2009 1 Agenda The Need for Interoperable Management KMIP Overview KMIP Specification KMIP Use Cases 2 The Need for Interoperable
Trusted Computing Group
Trusted Computing Group Backgrounder May 2003 Copyright 2003 Trusted Computing Group (www.trustedcomputinggroup.org.) All Rights Reserved Trusted Computing Group Enabling the Industry to Make Computing
This Security Policy describes how this module complies with the eleven sections of the Standard:
Vormetric, Inc Vormetric Data Security Server Module Firmware Version 4.4.1 Hardware Version 1.0 FIPS 140-2 Non-Proprietary Security Policy Level 2 Validation May 24 th, 2012 2011 Vormetric Inc. All rights
DIACAP and the GIG IA Architecture. 10 th ICCRTS June 16, 2005 Jenifer M. Wierum (O) (C)
DIACAP and the GIG IA Architecture 10 th ICCRTS June 16, 2005 Jenifer M. Wierum (O) 210-9252417 (C) 210-396-0254 jwierum@cygnacom.com OMB Circular A-130 (1996) OMB A-130 required systems and applications
CSE 565 Computer Security Fall 2018
CSE 565 Computer Security Fall 2018 Lecture 11: Public Key Infrastructure Department of Computer Science and Engineering University at Buffalo 1 Lecture Outline Public key infrastructure Certificates Trust
A Security Infrastructure for Trusted Devices
Infrastructure () A Security Infrastructure for Trusted Devices Mahalingam Ramkumar Mississippi State University, MS Nasir Memon Polytechnic University, Brooklyn, NY January 31, 2005 Infrastructure ()
SHA-1 to SHA-2. Migration Guide
SHA-1 to SHA-2 Migration Guide Web-application attacks represented 40 percent of breaches in 2015. Cryptographic and server-side vulnerabilities provide opportunities for cyber criminals to carry out ransomware
UNCLASSIFIED. FY 2016 Base FY 2016 OCO
Exhibit R-2, RDT&E Budget Item Justification: PB 2016 Defense Security Service Date: February 2015 0400: Research, Development, Test & Evaluation, Defense-Wide / BA 7: Operational Systems Development COST
PKI-An Operational Perspective. NANOG 38 ARIN XVIII October 10, 2006
PKI-An Operational Perspective NANOG 38 ARIN XVIII October 10, 2006 Briefing Contents PKI Usage Benefits Constituency Acceptance Specific Discussion of Requirements Certificate Policy Certificate Policy
INFORMATION EXCHANGE GATEWAYS: REFERENCE ARCHITECTURE
INFORMATION EXCHANGE GATEWAYS: REFERENCE ARCHITECTURE MAY 2017 A NEXOR WHITE PAPER NEXOR 2017 ALL RIGHTS RESERVED CONTENTS 3 4 5 6 7 8 11 12 13 14 15 INTRODUCTION IEG SCENARIOS REFERENCE ARCHITECTURE ARCHITECTURE
National Information Assurance Partnership. Common Criteria Evaluation and Validation Scheme. Validation Report. for
National Information Assurance Partnership Common Criteria Evaluation and Validation Scheme Validation Report for Microsoft Windows 10 Anniversary Update IPsec VPN Client TM Report Number: CCEVS-VR-VID10753-2016
National Information Assurance Partnership. Common Criteria Evaluation and Validation Scheme Validation Report
National Information Assurance Partnership TM Common Criteria Evaluation and Validation Scheme Validation Report Blue Ridge Networks BorderGuard Centrally Managed Embedded PKI Virtual Private Network (VPN)
National Information Assurance (IA) Policy on Wireless Capabilities
Committee on National Security Systems CNSS Policy No. 17 National Information Assurance (IA) Policy on Wireless Capabilities This document prescribes minimum standards. Your department or agency may require
DirectTrust Governmental Trust Anchor Bundle Standard Operating Procedure
DirectTrust Governmental Trust Anchor Bundle Standard Operating Procedure Change Control Date Version Description of changes 15-December- 2016 1-December- 2016 17-March- 2016 4-February- 2016 3-February-
The Open Protocol for Access Control Identification and Ticketing with PrivacY
The Open Protocol for Access Control Identification and Ticketing with PrivacY For Secure Contactless Transactions and Enabling Logical and Physical Access Convergence October 2010 Actividentity 2 OPACITY
Introduction to Network Security Missouri S&T University CPE 5420 Key Management and Distribution
Introduction to Network Security Missouri S&T University CPE 5420 Key Management and Distribution Egemen K. Çetinkaya Egemen K. Çetinkaya Department of Electrical & Computer Engineering Missouri University
XenApp 5 Security Standards and Deployment Scenarios
XenApp 5 Security Standards and Deployment Scenarios 2015-03-04 20:22:07 UTC 2015 Citrix Systems, Inc. All rights reserved. Terms of Use Trademarks Privacy Statement Contents XenApp 5 Security Standards
Lecture 15 PKI & Authenticated Key Exchange. COSC-260 Codes and Ciphers Adam O Neill Adapted from
Lecture 15 PKI & Authenticated Key Exchange COSC-260 Codes and Ciphers Adam O Neill Adapted from http://cseweb.ucsd.edu/~mihir/cse107/ Today We will see how signatures are used to create public-key infrastructures
Commercial Solutions for Classified (CSFC) Multi-Site Virtual Private Network Capability Package
NATIONAL SECURITY AGENCY INFORMATION ASSURANCE DIRECTORATE Commercial Solutions for Classified (CSFC) Multi-Site Virtual Private Network Capability Package Version 1.0 August 17, 2012 This page left intentionally
Understanding Layer 2 Encryption
Understanding Layer 2 Encryption TECHNICAL WHITEPAPER Benefits of Layer 2 Encryption Lowest cost of ownership Better bandwith efficiency (up to 50%) Minimal ongoing maintenance routing updates transparent
INTERNATIONAL LAW ENFORCEMENT HD CCTV NETWORK
INTERNATIONAL LAW ENFORCEMENT HD CCTV NETWORK CASE STUDY Application of High-Assurance Network Encryption Sector: Use Case: Solution: Government CCTV security Real-time HD video transmission across Layer
existing customer base (commercial and guidance and directives and all Federal regulations as federal)
ATTACHMENT 7 BSS RISK MANAGEMENT FRAMEWORK PLAN [L.30.2.7, M.2.2.(7), G.5.6; F.2.1(41) THROUGH (76)] A7.1 BSS SECURITY REQUIREMENTS Our Business Support Systems (BSS) Risk MetTel ensures the security of
Updates: 2409 May 2005 Category: Standards Track. Algorithms for Internet Key Exchange version 1 (IKEv1)
Network Working Group P. Hoffman Request for Comments: 4109 VPN Consortium Updates: 2409 May 2005 Category: Standards Track Algorithms for Internet Key Exchange version 1 (IKEv1) Status of This Memo This
UNCLASSIFIED FY 2016 OCO. FY 2016 Base
Exhibit R-2, RDT&E Budget Item Justification: PB 2016 Air Force : February 2015 3600: Research, Development, Test & Evaluation, Air Force / BA 7: Operational Systems Development COST ($ in Millions) (+)
U.S. E-Authentication Interoperability Lab Engineer
Using Digital Certificates to Establish Federated Trust chris.brown@enspier.com U.S. E-Authentication Interoperability Lab Engineer Agenda U.S. Federal E-Authentication Background Current State of PKI
National Information Assurance Partnership. Common Criteria Evaluation and Validation Scheme. Validation Report
National Information Assurance Partnership Common Criteria Evaluation and Validation Scheme TM Validation Report Network Device collaborative Protection Profile (NDcPP) Extended Package VPN Gateway Version
HP Instant Support Enterprise Edition (ISEE) Security overview
HP Instant Support Enterprise Edition (ISEE) Security overview Advanced Configuration A.03.50 Mike Brandon Interex 03 / 30, 2004 2003 Hewlett-Packard Development Company, L.P. The information contained
DoD Mobility Mobility Product Security Certification Processes
DoD Mobility Mobility Product Security Certification Processes Greg Youst DISA Chief Mobility Engineer 25 May 2017 Agenda DoD Mobility Unclassified Mobility Certification Process Main DoD Approved Product
Campus IT Modernization OPERATIONAL CONTINUITY FLEXIBLE TECHNOLOGY MODERNIZED SYSTEMS
Campus IT Modernization OPERATIONAL CONTINUITY FLEXIBLE TECHNOLOGY MODERNIZED SYSTEMS Managing the Complexity of IT Modernization Constructing and modernizing a new campus is a complex undertaking, requiring
INFORMATION ASSURANCE DIRECTORATE
National Security Agency/Central Security Service INFORMATION ASSURANCE DIRECTORATE Digital Policy Management consists of a set of computer programs used to generate, convert, deconflict, validate, assess
Indeed Card Management Smart card lifecycle management system
Indeed Card Management Smart card lifecycle management system Introduction User digital signature, strong authentication and data encryption have become quite common for most of the modern companies. These
Transglobal Secure Collaboration Program Secure v.1 Technical Specification. Prepared by: TSCP Secure v.
Transglobal Secure Collaboration Program Secure E-mail v.1 Technical Specification Prepared by: TSCP Secure E-mail v.1 Project Team Version: 3.0.2 Date: 07/16/2012 TSCP Secure E-Mail v.1 Technical Specification
Securing Data-at-Rest
Securing Data-at-Rest Robert A. (Bob) Lockhart NeoScale Systems, Inc. 1655 McCarthy Blvd, Milpitas, CA 95035-7415 Phone:+1-408-473-1300 FAX: +1-408-473-1307 E-mail: rlockhart@neoscale.com Presented at
National Information Assurance Partnership (NIAP) 2017 Report. PPs Completed in CY2017
National Information Assurance Partnership (NIAP) 2017 Report NIAP continued to grow and make a difference in 2017 from increasing the number of evaluated products available for U.S. National Security
Cristina Nita-Rotaru. CS355: Cryptography. Lecture 17: X509. PGP. Authentication protocols. Key establishment.
CS355: Cryptography Lecture 17: X509. PGP. Authentication protocols. Key establishment. Public Keys and Trust Public Key:P A Secret key: S A Public Key:P B Secret key: S B How are public keys stored How
An Introduction to Trusted Platform Technology
An Introduction to Trusted Platform Technology Siani Pearson Hewlett Packard Laboratories, UK Siani_Pearson@hp.com Content What is Trusted Platform technology and TCPA? Why is Trusted Platform technology
Public Key Infrastructure PKI. National Digital Certification Center Information Technology Authority Sultanate of Oman
Public Key Infrastructure PKI National Digital Certification Center Information Technology Authority Sultanate of Oman Agenda Objectives PKI Features etrust Components Government eservices Oman National
CN9000 Series 100Gbps Encryptors
CN9000 Series 100Gbps Encryptors Senetas CN9000 Series, 100 Gigabits streamed in 1 second Ultra-Fast, Ultra-Secure, Ultra-Reliable The CN9000 series from Senetas sets a new benchmark for encryption performance;
Brocade FastIron SX, ICX, and FCX Series Switch/Router
National Information Assurance Partnership Common Criteria Evaluation and Validation Scheme TM Validation Report Brocade Communications Systems, Inc. 130 Holger Way San Jose, CA 95134 Brocade FastIron
CIP Security Pull Model from the Implementation Standpoint
CIP Security Pull Model from the Implementation Standpoint Jack Visoky Security Architect and Sr. Project Engineer Rockwell Automation Joakim Wiberg Team Manager Technology and Platforms HMS Industrial
Brocade MLXe Family Devices with Multi- Service IronWare R
National Information Assurance Partnership Common Criteria Evaluation and Validation Scheme TM Validation Report Brocade Communication Systems, Inc 130 Holger Way San Jose, CA 95134 Brocade MLXe Family
Supporting Infrastructure
Chapter 8 Supporting Infrastructure Supporting Infrastructure A principal tenet of the Defense-in-Depth philosophy is to provide defenses against cyber intrusions and attacks, and deal effectively with
Information Systems Security Requirements for Federal GIS Initiatives
Requirements for Federal GIS Initiatives Alan R. Butler, CDP Senior Project Manager Penobscot Bay Media, LLC 32 Washington Street, Suite 230 Camden, ME 04841 1 Federal GIS "We are at risk," advises the
1. CyberCIEGE Advanced VPNs
1. CyberCIEGE Advanced VPNs CyberCIEGE is an information assurance (IA) training tool that illustrates computer and network security principles through simulation and resource management trade-offs. CyberCIEGE
National Information Assurance Partnership. Common Criteria Evaluation and Validation Scheme. Validation Report. for
National Information Assurance Partnership Common Criteria Evaluation and Validation Scheme TM Validation Report for Report Number: CCEVS-VR-10746-2016 Dated: November 10, 2016 Version: 1.0 National Institute
FiXs - Federated and Secure Identity Management in Operation
FiXs - Federated and Secure Identity Management in Operation Implementing federated identity management and assurance in operational scenarios The Federation for Identity and Cross-Credentialing Systems
Designing Network Encryption for the Future Emily McAdams Security Engagement Manager, Security & Trust Organization BRKSEC-2015
Designing Network Encryption for the Future Emily McAdams Security Engagement Manager, Security & Trust Organization BRKSEC-2015 What Could It Cost You? Average of $0.58 a record According to the Verizon
Advanced Certifications PA-DSS and P2PE. Erik Winkler, VP, ControlCase
Advanced Certifications PA-DSS and P2PE Erik Winkler, VP, ControlCase ControlCase Annual Conference Miami, Florida USA 2017 PCI Family of Standards Ecosystem of payment devices, applications, infrastructure
SPAWAR Systems Center (SSC) Pacific Unmanned Vehicle (UV) Information Assurance (IA) Support
SPAWAR Systems Center (SSC) Pacific Unmanned Vehicle (UV) Information Assurance (IA) Support 15th Annual INCOSE Region II Fall Mini-Conference 30 October 2010 John Yen Unmanned IA Support Team SSC Pacific
TECHNICAL STANDARDS ASSESSMENT REPORT
TECHNICAL STANDARDS ASSESSMENT REPORT 7/28/2018 Version 2.0, M. Ficken 1 Table of Contents 1 Table of Contents... 2 2 Scope... 3 2.1 ATMIA Next Gen Blueprint... 3 3 ASSESSMENT... 4 3.1 BIGGER PICTURE...
Multi-Domain exchange (MDeX) System
Multi-Domain exchange (MDeX) System Cross Domain (aka Assured Information Sharing) for Tactical Coalition, Disaster Recovery, and Service-Based Assured Information Sharing Insert Your Name Insert Your
FIPS Compliance of Industry Protocols in Edward Morris September 25, 2013
FIPS 140-2 Compliance of Industry Protocols in 2014 Edward Morris September 25, 2013 Topics Abstract Background DES SP 800-57 SP 800-131 The Protocols IPsec TLS SSH Others Challenges & Recommendations
SECURING MOBILITY. Through the Canadian Medium Assurance Solutions Program. ICMC May Greg Hills Director, Architecture and Technology Assurance
SECURING MOBILITY Through the Canadian Medium Assurance Solutions Program ICMC May 2016 Greg Hills Director, Architecture and Technology Assurance PAGE 1 INTRODUCTION Basic, Medium, and High Assurance
UNCLASSIFIED. R-1 ITEM NOMENCLATURE PE N: Tactical Data Links
Exhibit R-2, RDT&E Budget Item Justification: PB 2012 Navy DATE: February 2011 COST ($ in Millions) FY 2010 FY 2011 Total FY 2013 FY 2014 FY 2015 FY 2016 Navy Page 1 of 16 R-1 Line Item #183 To Complete
Dell SonicWALL. NSA 220, NSA 220W and NSA 240. FIPS Non-Proprietary Security Policy
Dell SonicWALL NSA 220, NSA 220W and NSA 240 FIPS 140-2 Non-Proprietary Security Policy Level 2 Version 3.1 April 28, 2014 1 Copyright Notice Copyright 2014 Dell SonicWALL May be reproduced only in its
Achieving a FIPS Compliant Wireless Infrastructure using Intel Centrino Mobile Technology Clients
Achieving a FIPS Compliant Wireless Infrastructure using Intel Centrino Mobile Technology Clients This document is provided as is with no warranties whatsoever, including any warranty of merchantability,
Exploring the ISA100.11a Standard. Exploring the ISA100.11a Standard. William (Bill) Ayers America s OneWireless Consultant.
Exploring the ISA100.11a Standard March 2012 William (Bill) Ayers America s OneWireless Consultant Exploring the ISA100.11a Standard WHY Standards World Leader SolutionsFocused Greatest Flexibility International
Citrix XenApp and XenDesktop 7.15 LTSR FIPS Sample Deployments
Citrix XenApp and XenDesktop 7.15 LTSR FIPS 140-2 Sample Deployments Contents Introduction... 2 Audience... 2 Security features introduced in XenApp and XenDesktop 7.15 LTSR... 2 FIPS 140-2 with XenApp
INTERNATIONAL LAW ENFORCEMENT CCTV NETWORK SERVICES
INTERNATIONAL LAW ENFORCEMENT CCTV NETWORK SERVICES CASE STUDY Application of High-Assurance Network Encryption Sector : Use Case: Solution: CCTV security HD video Layer 2 network architecture A Major
COMBINED FEDERATED BATTLE LABORATORIES NETWORK (CFBLNet)
UNCLASSIFIED COMBINED FEDERATED BATTLE LABORATORIES NETWORK (CFBLNet) PUBLICATION 1 ANNEX I GLOSSARY OF TERMS Version 8.0 July 2015 UNCLASSIFIED DOCUMENT CONTROL AND TRACKING METADATA Security Classification
Multi-Vendor Key Management with KMIP
Multi-Vendor Key Management with KMIP Tim Hudson CTO & Technical Director tjh@cryptsoft.com 1 Abstract Practical experience from implementing KMIP and from deploying and interoperability testing multiple
GDPR Update and ENISA guidelines
GDPR Update and ENISA guidelines 2016 [Type text] There are two topics that should be uppermost in every CISO's mind, how to address the growing demand for Unified Communications (UC) and how to ensure
Implementing Secure Socket Layer
This module describes how to implement SSL. The Secure Socket Layer (SSL) protocol and Transport Layer Security (TLS) are application-level protocols that provide for secure communication between a client
Transmission Security (TRANSEC) in an IP based VSAT Architecture April 2007
Transmission Security (TRANSEC) in an IP based VSAT Architecture April 2007-1 - As the ability to monitor satellite transmissions grows increasingly sophisticated, the need to implement increased levels
Assurance Activity Report (AAR) for a Target of Evaluation
Assurance Activity Report (AAR) for a Target of Evaluation Apple IOS 10.2 VPN Client on iphone and ipad Apple IOS 10.2 VPN Client Security Target Version 1.0, July 2017 Protection Profile for IPsec Virtual
National Information Assurance Partnership
National Information Assurance Partnership TM Common Criteria Evaluation and Validation Scheme Validation Report For VMware ESX Server 2.5.0 and VirtualCenter 1.2.0 Report Number: CCEVS-VR-06-0013 Dated:
National Information Assurance Partnership
National Information Assurance Partnership TM Common Criteria Evaluation and Validation Scheme Validation Report Protection Profile for IPsec Virtual Private Network (VPN) Clients, Version 1.1 Report Number:
Requirements for Building Effective Government WLANs
White Paper Government Requirements for Building Effective Government WLANs CJ Mathias Farpoint Group Introduction With governments just now beginning the adoption of wireless LANs as a key component of
Payment Card Industry (PCI) PIN Transaction Security (PTS) Hardware Security Module (HSM) Evaluation Vendor Questionnaire Version 2.
Payment Card Industry (PCI) PIN Transaction Security (PTS) Hardware Security Module (HSM) Evaluation Vendor Questionnaire Version 2.0 May 2012 Document Changes Date Version Author Description April 2009
Intelligent Solutions for the most Rigorous IT Security Requirements
Intelligent Solutions for the most Rigorous IT Security Requirements 1 2 1 2 3 Information Security from the Architects of Modern Encryption Systems SINA (Secure Inter-Network Architecture) enables the
HIT Policy Committee. Recommendations by the Certification and Adoption Workgroup. Paul Egerman Marc Probst, Intermountain Healthcare.
HIT Policy Committee Recommendations by the Certification and Adoption Workgroup Paul Egerman Marc Probst, Intermountain Healthcare July 16, 2009 Agenda The Workgroup The Workgroup s Charge Workgroup Process
Who s Protecting Your Keys? August 2018
Who s Protecting Your Keys? August 2018 Protecting the most vital data from the core to the cloud to the field Trusted, U.S. based source for cyber security solutions We develop, manufacture, sell and
An Enterprise Guide to Understanding Key Management
An Enterprise Guide to Understanding Key Management WHITE PAPER Executive Overview Establishing effective key and policy management is a critical component to an overall data protection strategy and lowering
Technical Security Standard
Technical Security Standard Title: Minimum Controls TSS Version: 1.1 Effective Date July 2018 This Standard defines the minimum baseline security controls and Summary: processes required for a given Information
DEFENSE INFORMATION SYSTEMS AGENCY P. O. BOX 549 FORT MEADE, MARYLAND Joint Interoperability Test Command (JTE) 14 Apr 15
DEFENSE INFORMATION SYSTEMS AGENCY P. O. BOX 549 FORT MEADE, MARYLAND 20755-0549 IN REPLY REFER TO: Joint Interoperability Test Command (JTE) 14 Apr 15 MEMORANDUM FOR DISTRIBUTION SUBJECT: Extension of
Cisco VPN Internal Service Module for Cisco ISR G2
Data Sheet Cisco VPN Internal Service Module for Cisco ISR G2 Compact Versatile High-Performance VPN Module The Cisco VPN Internal Service Module (VPN ISM) is a module for the Cisco Integrated Services
OpenWay by Itron Security Overview
Itron White Paper OpenWay by Itron OpenWay by Itron Security Overview Kip Gering / R. Eric Robinson Itron Marketing / Itron Engineering 2009, Itron Inc. All rights reserved. 1 Executive Summary 3 Intent