Security Featured Article

Embvue Inc., a provider of certifiable embedded systems, network and testing products, and professional services for mission-critical, safety-critical and security-sensitive systems, announced the launch of its Isis product line.

The Isis product and tools includes a Multiple Independent Levels of Security “MILS” software-based secure switch/router, a MILS software-based end system and purpose-built tool suite targeting Common Criteria EAL5+.

Based upon the tried and tested aviation industry standard for airborne Ethernet networks, the Isis product family includes a secure switch / router software implementation, a secure end system network stack and a complete set of networking tools. These aid customers in designing, simulating, integrating, configuring, optimizing and monitoring the network.

Phil Cole, VP sales and marketing at Embvue, commented in a press release, "Embvue has been intimately involved with the safe, deterministic Ethernet space for several years and has already brought to market three successful products to serve it (A-Stack, A-Switch and Prodigy).”

Cole further added, “Isis is an extension of these products to adapt them for use in the secure networks market, which we see growing significantly in importance over the coming years. The Isis product line has been developed rigorously to DO-178B Level A, so it is ideally suited to common criteria evaluation, and since it is a modular and 100 percent software-based, relatively few enhancements were required to adapt it for use in the security market."

Isis has been providing all of the components required to create a secure MILS network. The new Isis tools provide the capability to greatly simplify and partially automate the process of simulating, integrating, optimizing, deploying, and monitoring a secure network that comprises many different components.

In addition, the Isis tools aid customers to configure and re-configure entire networks automatically once the desired modifications have been made in the Isis network simulation tool.

Furthermore, the tools provide the ability to interface to the software Partitioning Communication System “PCS.” The Isis tools allow access to the PCS for authorized users to allow them the ability to modify the in-use security policy as security threats or the environment change.

Embvue’s Isis product line is platform independent, because it has been architected to provide the maximum possible separation from the underlying hardware and operating system upon which it runs.

Isis also controls security and routing at the virtual link level. Switches and routers do not need to be configured with a single security level assigned to each physical port. This provides enormous network flexibility, thereby reducing the overall number of switches/routers required. This helps in reducing cabling, quantity of hardware, system weight, and system production time, said officials with Embvue.