DRS & Cisco Secure Mobility. Kevin A. Braz Director, Advanced Technology. Presented to: Secure Mobility User s Group Bethesda, MD August 27, 2013

Transcription

1 DR & Cisco ecure Mobility Kevin A. Braz Director, Advanced Technology Presented to: ecure Mobility User s Group Bethesda, MD August 27,

2 VALUE, INNOVATION, and TECHNOLOGY through PARTNERHIP ECURITY TREND BOTH COMMERICAL AND DOD DR & CICO ECURE MOBILITY The Banking Industry U.. vs. Overseas; the difference is alarming Most overseas banking corporations: ecure infrastructure based on multi-level security (ML) Industry standard encryption to ensure confidentiality of data in transit Industry standard infrastructure protection: firewalls, vulnerability, etc Mandatory secondary authentication Ability to secure and control data access dynamic methods of authentication: OTP, Chip Authentication, etc Most U.. banking corporations: Weak platform and infrastructure security weak static password deployment User password interchangeability increases exposure Two-Factor authentication optional (if available) mart-phone applications: weak OTP (if available) The Trend: NA uite B becomes the norm, the need for information control on and off platform drives new solutions, ML becomes commonplace 2

3 VALUE, INNOVATION, and TECHNOLOGY through PARTNERHIP ECURITY TREND BOTH COMMERICAL AND DOD Bring Your Own Device/Network (BYOD/N) is the new buzz The Commercial ector: DR & CICO ECURE MOBILITY Looking for increased efficiency to controlled costs Looking for ways to match the speed with which devices and software are being introduced to the market Looking to provision a mobile workforce Looking to attract the next generation BYOD/N proponent The Trend: BYOD/N is becoming the rule rather than the exception in today s workplace & it s going to drive new security solutions The DOD: Have adopted a phased BOYD approach for some non-tactical applications permitting secure classified and protected unclassified communications between COT mobile devices over commercial networks Generally opposed to allow devices to connect to secure infrastructure that have been used to access risky commercial networks/services Concerned about loss of device and its resulting content The Trend: DOD will be slow to adapt but equestration will fuel acceptance 3

4 VALUE, INNOVATION, and TECHNOLOGY through PARTNERHIP ECURITY TREND BOTH COMMERICAL AND DOD DR & CICO ECURE MOBILITY equestration will redefine everything: DOD acquisition, governance, security ACAT 1 programs are few and far between Less cost = more COT, now what about security The Trend: More reliance on commercial technologies that have been adapted for the battlefield The Trend: Proliferation of NA uite B for devices operating on commercial and tactical networks The New generation grew up with technology Insatiable appetite for technology and its use Embedded instinct for its operation (virtually no formal training required) The Trend: My device is better and cheaper than the one you re providing Collapse of the tactical Infrastructure New platforms cost far too much Existing on platform technologies are obsolete The Trend: ML, Virtualization, multi-function platforms, WAP-C 4

5 WHERE ARE THE TREND LEADING U? DR & CICO ECURE MOBILITY VALUE, INNOVATION, and TECHNOLOGY through PARTNERHIP Online Fraud, Identity theft, Data theft, BYOD/N and equestration are driving key technologies that will be prolific in shaping our future developments: Cloud based 2FA (Two Factor Authentication), Trusted ign-in User tracking and Control of data where ever it resides BYOD policy considerations Device discovery mechanisms Enrollment best-practices Over-the-air configuration Adoption of uite B encryption Enforcement and support of standard device and data security Easily manage device provisioning and support upport for multiple Os, data, and mobile applications regardless of location or type of device 5

6 Data Distribution Unit (DDU): The Core of our Platform Offering 1. Cisco Embedded Data Router 2. Ethernet witch 3. Voice Cross Banding and IP erver 4. Tactical erver 9 x 11.5 x lbs. 5. Network Video Distribution 8.5 x 11 x 2 5lbs. 6. Peripheral Control and Voice & Data Radio Management 7. upport sensor interfaces 8. GP Distribution on the platform 6

7 Data Distribution Unit (DDU): Customer requirements driving technology Cisco based VM s Persistent distribution, data control & intelligent pull of information Full encryption, ecure messaging, images, attachments and data at rest Ownership and control of data Established API to support development of a secure handheld environment Mandatory Access Controls Well-defined policy interfaces upport for applications querying the policy and enforcing access control Cross Domain, Deep Content Inspection, secure operating systems Based upon hardened Red Hat Enterprise Linux 5.6 ecure Infrastructure for securing and locking down VM s Accurate data exchange across multiple security domains via policy and mandatory access controls 7

8 Data Distribution Unit (DDU): Upgrades based on Trends Applications cryptographically bound to the hardware and O Virtualized Platform with Embedded ecurity Intel Trusted Execution Technology (TXT) Virtualization Technology for Directed I/O (VT-d) Intel Hardware Virtualization Technology (VT-x) Trusted Platform Modules (TPM) 8

9 CICO YTEM, INC. trategic partnership aimed at rapid integration of COT technologies to provide value add for the warfighter without originating or promulgating proprietary design Heavy focus on significant WAP-C savings allowing consolidation of platform equipment Cisco 5915: Embedded ervices Router (ER), small for factor PCI-104 Multi-domain solution in a ½ height DDU package Dual router design with embedded INE Cisco 5921: Embedded ervices Router W for x86 Processor Linux based software router hosted on the DDU platform A A C U C M I P W A A I P I C I O CR 1000: Cloud ervices Router (CR) in a virtual form factor Complete, hypervisor-isolated, multi-service router instance Platform scalable upport for nexgen services and on demand networking kwaa: Virtualized CP compliant WAN optimization and application Integrated with pace Communication Protocol tandards (CP) vcucm: Virtualized Cisco Unified Call Manager Fully integrates call manager on the DDU platform ecure Mobile Architecture: Multi Domain Handheld Technology NA-approved E Android O secure transport across 3/4 G LTE & , using uite B cryptography Next generation features (IM, High-Definition Video, Visual Voic ) 9