Multi-Domain exchange (MDeX) System

Size: px

Start display at page:

Download "Multi-Domain exchange (MDeX) System"

Merryl McCoy
5 years ago
Views:

1 Multi-Domain exchange (MDeX) System Cross Domain (aka Assured Information Sharing) for Tactical Coalition, Disaster Recovery, and Service-Based Assured Information Sharing Insert Your Name Insert Your Title Shawn Campbell, Director/Information Sharing Insert Date MDeX System Product Manager

2 Agenda Who is? What is Assured Information Sharing? What is the MDeX System? MDeX System and Assured Information Sharing 2

3 - Proven Information Assurance Partner Over $1 Trillion a Day #1 in Classified Data #1 in Digital Identities Strong Past Performance Federal Compliant Solutions Global Best Practices 3

Product Lines Data Protection for Virtual and Cloud Environments ProtectV KeySecure StorageSecure Data Encryption & Control DataSecure ProtectDB, ProtectApp, ProtectFile, ProtectDrive Tokenization

4 Product Lines Data Protection for Virtual and Cloud Environments ProtectV KeySecure StorageSecure Data Encryption & Control DataSecure ProtectDB, ProtectApp, ProtectFile, ProtectDrive Tokenization Manager Strong Authentication - Identity Protection Solutions Authentication Service (SAS) Commercial Authentication (etoken, SAC, SAM, MobilePass) HSM family (all variants) Smart Card 650 (SC650) skey6500 SHAC middleware micro-sc650 (with Cobra middleware) ASICs & Modules SCC650 ASIC SafeXcel 3320, 3340/41, CGX Assured Information Sharing MDeX System Belcamp, MD Headquarters High Speed Network Commercial HSE Product Family (SSE, SEE) SMC Commercial 4

5 Data Protection Assured Information Sharing ProtectApp ProtectDB ProtectFile File Servers Application and web servers Databases Tokenizatio n Manager StorageSecure ProtectZ NAS/SAN Storage Mainframes Virtual Machine s ProtectV Private Cloud Authentication Service Enterprise Key-Management DataSecure & KeySecure DATACENTER Internal Clouds Assured Information Sharing (MDeX System) External Clouds HSM as a Service FEDERATION 5

6 Assured Information Sharing Complex shift from only need to know to combining with need to share Stakeholders Warfighters Analysts Operators Responders Decision Makers Information Owners Information Custodians Risk Managers C O M M U N I T I E S Defense Intelligence Homeland Security Foreign Affairs International Partners Federal Law Enforcement Non-Government Organizations (NGOs) Public RANGE OF MISSIONS Assured Information Sharing Sharing "the right data, any time, any place, usable by any authorized recipient, preventable only by law or policy and not technology, and protected by a comprehensive regimen of accountability. - Clapper 6

Multi-Domain exchange (MDeX) System Cross Domain Solution (CDS) and Transfer System Automated information flow policy decision & enforcement across security, mission, information, organization, and

7 Multi-Domain exchange (MDeX) System Cross Domain Solution (CDS) and Transfer System Automated information flow policy decision & enforcement across security, mission, information, organization, and management domains Provides Assured Information Sharing (AIS) for : > Collection of diverse volumes, velocities, & varieties of data > Distribution of data for collaborative information processing > Dissemination of information products to consumers > Delivery of time sensitive alerts/tips & command/control MDeX System Components: > MDeX Transfer System (MTS) (MLS security core/cds) > Security Domain Intermediary () (edge interfaces) > Remote Management Station (RMS) (element manager) 7

U.S. UCDMO Baseline - Since 09/2011 Protection Level 4 (PL4) accredited for U-S, S-TS, S/TS REL TO S/TS Enterprise (Data Centers/Rooms) and Tactical (MRAPs) Implementations Accredited Messaging

8 U.S. UCDMO Baseline - Since 09/2011 Protection Level 4 (PL4) accredited for U-S, S-TS, S/TS REL TO S/TS Enterprise (Data Centers/Rooms) and Tactical (MRAPs) Implementations Accredited Messaging (JMS), Telemetry (UDP), and File Sharing (File) Flows Accredited Text (structured), JMS XML content, XML schema data type filtering Available Messaging (XMPP), (SMTP), Streaming (TCP) flows Available NITF, KLV, Sidecar (e.g., Office, PDF), data type filtering Soon: FMV and HTTP(S) Flows 8

9 MDeX System Overview Adaptable Flow Engine 9

10 MDeX System Flow Chat XML XMPP JMS Text Content SMTP DropBox Protocol MTS Users ingests provides pulls pushes verifies produce consume and content, validates from to through on from content, server(s) protocol, based release from for to on processing server(s) policies for transfer Content MTS Content XMPP JMS Protocol SMTP DropBox RMS Event Monitoring and Analysis (w/ Splunk) Management (Policy, Configuration) Command and Control Policy Decision and Enforcement Mandatory Access Control Multi-Level Security Content Filtering Flow Control Content Chat XML Text 10

Configuration Notes Basic Data Center Configuration 1 RMS One RMS can support multiple MTSs 1 MTS One MTS can support up to 6 domains 2 At least one is required for

platforms (hardware or virtual machines) Co-resident within source/destination application hosting environment Embedded in source/destination applications using s API

11 Configuration Notes Basic Data Center Configuration 1 RMS One RMS can support multiple MTSs 1 MTS One MTS can support up to 6 domains 2 At least one is required for each domain Basic Tactical Configuration 1 ruggedized MTS One MTS can support up to 4 domains 2 At least one is required for each domain Deployment As stand alone platforms (hardware or virtual machines) Co-resident within source/destination application hosting environment Embedded in source/destination applications using s API MTSs can be deployed in mesh architecture for high-availability and load balancing MDeX System supports DropBox, , Messaging, Proxy and any content. Soon: FMV and Web 11

into common information sharing model Consolidate the Infrastructure capitalize existing

12 Assured Information Sharing Model MDeX System MDeX System Access information anywhere/anytime users in disparate domains access all authorized information Common Enterprise federate services/domains into common information sharing model Consolidate the Infrastructure capitalize existing infrastructure and resources just move the information Single user interface MLS accessibility to information 12

from diverse domains to Mission and Enterprise (Health & Status, Security, Performance, Intel)

13 Cyber Security Situational Awareness Content Filtering Sidecar Content Filtering National Sidecar M T S Mission M T S Enterprise Mission Data Collection Aggregation of sensor, management, and monitoring data from diverse domains to Mission and Enterprise (Health & Status, Security, Performance, Intel) Situational Awareness Dissemination of reports, delivery of alerts/tips, and C2 (Analytics, Command and Control) 13

14 Disaster Recovery and Operations Continuity Bi-Lateral Mission Multi-Lateral Mission Content Filtering Military/Civilian Content Translation Sidecar M T S Enterprise Mission U.S. Mission NGOs Distributed Workflow for Business or Intelligence Analytics Rapid distribution of variable data and information for processing among diverse communities and resources Dissemination and Delivery of time sensitive intelligence and management data Rapid delivery of alerts and tips or command and control 14

15 Where we are heading 1990s-2005 GOTS Content Filter Engines (CFEs) GOTS Content Filter Applications (CFAs) File Transfer Console Access Legacy Transition Next Generation Organizational Messaging Forge-based CFAs COTS CFEs Remote Administration Service Provider Based Assured Information Sharing Application Messaging Volume, Velocity, & Variety SLAs Chat Web Multi Media Element Management Cloud Enterprise Management Content Filter Management Flow 15

16 Summary Plug and Play Architecture Modular Design: adding domains, communities of interest, applications and content filters requires no development. Create new protocol interfaces and content filter applications in minimal time, using API. Certify Once, Accredit Many: protocol interfaces or content filters are added without changes in the security support structure. Isolate certification and accreditation activities to just the new protocols or content filters, without re-certification of the MTS itself. Situational Awareness and Control Enterprise and Mission Integration: centralized and distributed capabilities for command and control, monitoring, and management activities. Enable cross domain awareness for enterprise services. Ease of Use: user-friendly design enables existing operators to maintain the system. Eliminate the need for Trusted OS and CDS SMEs for monitoring and management activities. Dynamic Policy Enforcement: data owners can establish granular information flows and content filtering policies as dictated for changing mission needs. Minimizes ramp up time for new mission capabilities. Customer Control Commercially developed: direct customer involvement and interaction with vendor, customer s requirements independently assessed and incorporated into release roadmaps independent of Program Management Office (PMO) budget, prioritization, and resource constraints. Customer managed: no vendor mandate for continued involvement in operations and associated long term costs. MDeX System s operational model enables existing customer s existing support team to readily execute full O&M of enterprise-wide MDeX System deployments and operations. 16

Bringing Core-Level Data Protection Solutions to the Tactical Field. January 2018

Bringing Core-Level Data Protection Solutions to the Tactical Field January 2018 1 Core-level Security Extended to the Tactical Field Trusted, U.S. based source for tactical cyber security solutions from