| Linux thin-client server OS undergoes EAL4 evaluation, pilot testing |
Nov. 02, 2005
A government contractor is pilot-testing Linux server technology that, when combined with thin clients, can provide government workers with secure access to multiple networks, servers, and security levels, it says. Trusted Computer Solutions's (TCS's) NetTop2 aims to allow intelligence workers to replace multiple PCs with a single thin-client device.
NetTop2 incorporates patented NetTop technology licensed from the NSA (National Security Agency), which worked with TCS under a CRADA (cooperative research and development agreement) to create NetTop2, TCS says.
TCS says NetTop2 puts authentication and security protection measures "at the edge" of the network, rather than on individual desktops, reducing infrastructure complexity. Workers needing access to computing resources at varying security classifications will be able to replace multiple desktop computers with a single thin client, according to the company.
Vendor neutrality
Interestingly, NetTop2 technology is vendor-neutral at the hardware level. It is currently being evaluated under Common Criteria EAL4 requirements on IBM xSeries, pSeries, and ZSeries servers, but could run on any appropriate platform supporting Linux, and with any qualified thin clients.
 Currently, NetTop2 is being tested with Wyse's V50 (pictured at right), which runs Wyse's Linux 2.6-based V6 OS on a 1GHz Via Eden processor. TCS may have chosen the V50 in part due to advanced security capabilities embedded in the Eden CPU.
Even more interesting, the TCS solution is vendor-neutral at the OS level. While NetTop technology is patented, the underlying OS is not.
NetTop2 is currently based on the NSA's (National Security Agency's) SELinux, which TCS says incorporates three "protection profiles" recognized by the Common Criteria and mandated by DCID 6/3 (director of Central Intelligence directive 6/3) for TSABI (top secret and below interoperability). These include labeled security (LSPP), controlled access (CAPP), and role-based access control (RBAC).
NetTop2/SELinux is the only available Linux distribution with an LSPP, TCS claims.
In the future, NetTop2 is expected to support underlying Linux OSes from a variety of vendors. For example, TCS says it is working with Red Hat and IBM to "upstream" required security features into the 5.0 release of Red Hat Enterprise Linux (RHEL 5.0), expected next fall.
NSA's chief of information assurance research, Susan Alexander, said, "For years our customers have been clamoring for the look, feel, flexibility, and functionality of today's commercial software. With NetTop they can get just such an environment ... without compromising on security."
TCS COO Edward Hammersla said, "NetTop2 is the only multilevel application solution that does not require proprietary hardware or a proprietary operating system."
Wyse VP of business development, Ali Fenn, said, "The inherent security associated with thin client devices, combined with the NetTop2 software solution, is an extremely powerful solution."
Availability
NetTop2 Thin Client is available immediately for pilot testing, with general availability expected at EOY (end of year).
Related Stories:
(Click here for further information)
|
|
|
7 Advantages of D2D Backup
For decades, tape has been the backup medium of choice. But, now, disk-to-disk (D2D) backup is gaining in favor. Learn why you should make the move in this whitepaper.
4 Legal Reasons to Control Internet Access
The Internet is obviously a valuable resource for many organizations. However, many are exposed to legal liability concerns because they fail to control Internet access. Learn if you're safe in this white paper.
Rapidly Resolve J2EE Application Problems
Whether you are in the process of building J2EE applications or have J2EE applications already running in production, you must ensure that they deliver the expected ROI. Learn how in this white paper.
Load Testing 2.0 for Web 2.0
There are many unknowns in stress testing Web 2.0 applications. Find out how to test the performance of Web 2.0 in this white paper.
Build Better Games Online
For the game infrastructure providers, life is complex. Making money from games has become more complicated. Why? Find out in this white paper.
Building a Virtual Infrastructure from Servers to Storage
This white paper discusses the virtual storage solutions that reduce cost, increase storage utilization, and address the challenges of backing up and restoring Server environments.
Gaining Faster Wireless Connections with WiMAX
Welcome to what is quickly becoming the hyperconnected world where anything that would benefit from being connected to the network will be connected. Learn more in this white paper.
Is Your Desktop a Security Threat?
The new wave of sophisticated crimeware not only targets specific companies, but also targets desktops and laptops as backdoor entryways into those business’ operations and resources. Learn how to stay safe in this white paper.
Increasing SAN Reliability by 100 Percent
Storage area networks (SAN) are a strong part of storage plans. Learn how to increase your reliability and uptime by 100 percent in this case study.
|
|
|
|
|
news feed