The Military Technical Institute

Transkript

1 The Military Technical Institute The security is essential, the security is a challenge Jitka Čapková Petr Kozák Vojenský technický ústav, s.p.

2 The Czech Republic security legislation applicable to CIS: Law n. 412/2005 Sb., Regulation n. 523/2005 Sb., concerning security of the CIS and other electronic devices handling classified information and shielded enclosures certification, as amended by regulation n. 453/2011 Sb. (beside a general rules for classified information processing it also describes for example INFOSEC rules), Czech National Security Agency Standard n. 2/2007 Sb. (equivalent to SDIP-29)

3 The security as a challenge Cons: The security is considered as a limitation by the designers. The security is considered as a necessary evil by the users. The security is often understand generally as a troublemaker by all. Pros: The system security guarantees data reliability, availability and authenticity. The system security gives a commander one of the preconditions for the task execution. The security is a challenge for industry!!!

4 How to satisfy security requirements during the system development? The security must be understand as an integral part of the contract one of the initial conditions of the public tender. From the very beginning (architecture design stage) is necessary to think of: The RED and BLACK zones separation, filtering, layout of cables, The INFOSEC rules, The communication cables protection, The RED and BLACK data secure isolation. Participation of the security manager before and during realization is required, and in the period of the system certification the participation of contractor is needed.

5 The system certification The stand alone certification is relevant for cryptographic devices and radios containing crypto capability only. In the case of the information systems is certification performed for the whole system, including applied security features (mechanism). Military Technical Institute is a designer and a provider of the wide spectrum of the security mechanisms for the certified systems used by The Czech Republic Armed Forces as a WOC/SQOC/DSQOC and GBAD.

6 The security solutions designed and provided by VTÚ Data diode: 2 Mbps 12 Mbps 100 Mbps (under development stage). Two-way security gateways 3S-x Smart Security Separator: 3S-1 Force Protection (targets positions, objects, vector data, brief orders), between security levels unclassified and secret, 3S-2 ATC (ADEXP flight plans), between security levels unclassified and secret, 3S-3 MSS-2 (a national flight crews evidence) between levels unclassified and secret, 3S-4 FADR (designed and planned for levels confidential secret), 3S-5 Mi-171Š (designed and planned for levels unclassified/restricted secret).

7 The security solutions designed and provided by VTÚ BF unit a security filter: The integrated security gateway for bit and character oriented messages, Development nearly finished actually in the stage of the factory tests, user tests scheduled for September 2015, Designed particularly for ground forces. IEG Information Exchange Gateway: Designed under NATO IEG Light concept for connection of the NATO SECRET, national SECRET and mission SECRET domains. Delivered during Designed particularly for ground forces.

8 IEG Data Diode BF Unit Smart Security Separator

9

10 Happy to answer any questions