Security Architecture Assessment

In partnership, RTI and Tresys Technolology now offer a Security Architecture Assessment, ensuring that security technology is architected in to the design of your distributed real-time system from the start.

The Security Architecture Assessment extends the RTI Architecture Study to add in-depth secure system design analysis.

RTI/Tresys Security Architecture Assessment

Leveraging both middleware and security expertise at the start of your project reduces risk and ensures optimal design for a secure distributed system. RTI and Tresys have combined their expertise to supplement the RTI Architecture Study with a Security Assessment. This assessment addresses both single-node security issues as well as distributed-system security concerns to help ensure high-performance, safe and secure access to the DDS network.

RTI and Tresys perform this study by spending several days onsite with the system designers at the beginning of the engagement and then meeting with the designers as needed over a three week period. At the end of the engagement RTI and Tresys engineers jointly deliver a written report with conclusions and recommendations and present a brief on those conclusions.

What's Covered In A Security Assessment

Designing secure systems is increasingly challenging as threats escalate and business demands push systems into riskier and more diverse uses. Adherence to increasingly stringent government and internal security standards is becoming more prevalent and adds additional challenges and risks. Security technology and development practices are advancing rapidly to meet these challenges, but few teams have the depth of expertise or leading edge knowledge needed to choose the best technologies and apply them effectively.

The Tresys Security Assessment provides strategic guidance to aid solution developers and integrators in choosing and applying the latest security technologies available on enterprise Linux distributions. Tresys engineers bring unmatched experience designing, building and certifying solutions deployed in security critical environments in government and industry. Tresys engineers have helped create many of the key security features included by default in Linux, most notably Security Enhanced Linux.

The Security Assessment Covers:

• Analysis of the security threats and requirements of the system, including any applicable security standards (e.g., Common Criteria, DCID 6/3, SOX, HIPAA)
• Platform selection recommendations including choosing and configuring the most appropriate enterprise Linux vendor and distribution version
• Architectural guidance and security technology recommendations designed to best meet the security requirements of the system while balancing development time and cost
• Configurations guidance based on best practices for common operating system security features including the Linux Audit Subsystem, IPTables, standard Linux discretionary access control and relevant network-facing daemons

Please contact RTI for more information about the benefits of a Security Assessment done in conjunction with your RTI Architecture Study.