We’ll be heading to Palm Springs for the U.S. Marine Corp Information Assurance expo March 29-31, 2010. Visit us at booth #208 to see the Interceptor in action.
Representatives from Tyco Electronics will also be on hand to talk about their AMPTRAC intelligent infrastructure management system (IIMS). Network Integrity Systems is teaming with Tyco Electronics to provide advanced network infrastructure security. Come see Interceptor and AMPTRAC, and find out how they can be integrated to form a total solution.
More about the conference at http://www.technologyforums.com/10MC/.
Thursday, March 25, 2010
Tuesday, March 16, 2010
Visit us at FOSE March 23-25
Network Integrity Systems will be at the FOSE 2010 conference next week, March 23-25, in Washington, D.C. Stop by our booth #1325 to find out what’s new in alarmed carrier PDS technology and to see a live demo of the Interceptor PDS.
While at FOSE, be sure to visit Tyco Electronics at booth #2531. Tyco is now offering the Interceptor PDS to complement Tyco’s AMPTRAC intelligent infrastructure management system. Together, these systems deliver an unprecedented level of security for classified government networks.
For more information about FOSE, go to http://www.fose.com/.
While at FOSE, be sure to visit Tyco Electronics at booth #2531. Tyco is now offering the Interceptor PDS to complement Tyco’s AMPTRAC intelligent infrastructure management system. Together, these systems deliver an unprecedented level of security for classified government networks.
For more information about FOSE, go to http://www.fose.com/.
Tuesday, February 16, 2010
Interceptor demo installed at General Dynamics Executive Briefing Center
If you've been looking for an opportunity to see the Interceptor alarmed carrier PDS in action, now is your chance. A demo system has just been installed as an IT solution in the General Dynamics Executive Briefing Center in Rosslyn, Virginia. Network Integrity Systems worked with Global Com Inc., an installer of structured cabling systems, to integrate Interceptor at the facility.
The Executive Briefing Center was created to host state-of-the-art multi-media presentations and leading-edge technology demonstrations for customers and partners of General Dynamics located in the Capitol District. Interceptor, an alarmed carrier PDS that ensures the protection and availability of SIPRNet, JWICS and other classified networks transmitting national security information, is a good fit for the facility. The device facilitates increased collaboration and information sharing for anti-terrorism activities and ensures COOP and availability of command and control networks.
If you're not in the D.C. area but would like to see how the Interceptor works, we'll demo the device at a number of tradeshows this year. Look for us at:
FOSE
USMC-IA
PM NSC
LandWarNet
TechNet Asia-Pacific
NGB JITC
The Executive Briefing Center was created to host state-of-the-art multi-media presentations and leading-edge technology demonstrations for customers and partners of General Dynamics located in the Capitol District. Interceptor, an alarmed carrier PDS that ensures the protection and availability of SIPRNet, JWICS and other classified networks transmitting national security information, is a good fit for the facility. The device facilitates increased collaboration and information sharing for anti-terrorism activities and ensures COOP and availability of command and control networks.
If you're not in the D.C. area but would like to see how the Interceptor works, we'll demo the device at a number of tradeshows this year. Look for us at:
FOSE
USMC-IA
PM NSC
LandWarNet
TechNet Asia-Pacific
NGB JITC
Friday, February 5, 2010
Fact Friday #3
I’ll address FAQs Part 3:
Q. Am I required to contain the cables being protected by Interceptor inside a hardened carrier system (i.e. rigid metallic conduit, EMT or commercial raceway)? A: It depends on the organization. Air Force updated its PDS policy in 2009 to permit flexible interlocking armored optical cables monitored by Interceptor as a PDS (up to TS-CONUS, Secret-OCONUS). Army and Navy will consider the same solution on a project-by-project basis. This allows cables to be distributed in existing conveyance (wire basket, ladder rack) or suspended from D-rings, J-Hooks, etc., resulting in tremendous cost savings and construction complexity reduction. For non-armored cables, Interceptor permits at a minimum the installation of the conduit above the ceiling or below the floor since the requirement for periodic visual inspections is eliminated when an alarmed carrier PDS is used. The benefits are still significant: more reliable inspection of the PDS (performed by the Interceptor 24/7), and much better facility aesthetics.
Q. What types of management or software tools are required to manage the Interceptor? A: The Interceptor can be locally managed by serial console, and remotely managed by Telnet or Secure Shell (SSH). The INTERCEPTOR can be accessed via terminal programs such as HyperTerminal or TeraTerm.
Q. Doesn’t the requirement to respond to alarms create an additional need for manpower? A: Since Interceptor eliminates the requirements to perform daily visual inspections of the PDS, the resources formerly used to conduct that task are no longer needed. A key thing to remember is that Interceptor prompts you when to conduct an inspection versus conducting them day-in-and-day-out whether a threat to the network exists or not. Therefore the use of Interceptor actually reduces the manpower necessary to secure a network.
Q. Who typically monitors the Interceptor and how do they receive the alarms generated? A: Monitoring responsibility is established on an organization-by-organization basis. Typically it is performed by Secu¬rity/Military Police, IT Help Desks or Network Operations & Security Centers (NOSCs). If Security/Military Police forces are used, then the Interceptor is usually integrated via dry contact interfaces into the existing building security system, which those forces routinely monitor. If monitored by IT departments or NOSCs, then the alarms are usually received via SNMP traps.
Q. Which organizations have deployed Interceptor? A: As of this printing Interceptor has been deployed by the US Air Force, US Army, US Coast Guard, US Marine Corps, CENTCOM, Department of Homeland Security, Defense Intelligence Agency, Department of Justice, DoD Department of Inspector General, Naval Surface Weapons Center, Naval Undersea Warfare Center, National Reconnaissance Office, SPAWAR, STRATCOM, The Pentagon, numerous large and small systems integrators, major defense contractors.
If you have specific questions about Interceptor or alarmed carrier PDS, email me at Amanda@networkintegritysystems.com.
Q. Am I required to contain the cables being protected by Interceptor inside a hardened carrier system (i.e. rigid metallic conduit, EMT or commercial raceway)? A: It depends on the organization. Air Force updated its PDS policy in 2009 to permit flexible interlocking armored optical cables monitored by Interceptor as a PDS (up to TS-CONUS, Secret-OCONUS). Army and Navy will consider the same solution on a project-by-project basis. This allows cables to be distributed in existing conveyance (wire basket, ladder rack) or suspended from D-rings, J-Hooks, etc., resulting in tremendous cost savings and construction complexity reduction. For non-armored cables, Interceptor permits at a minimum the installation of the conduit above the ceiling or below the floor since the requirement for periodic visual inspections is eliminated when an alarmed carrier PDS is used. The benefits are still significant: more reliable inspection of the PDS (performed by the Interceptor 24/7), and much better facility aesthetics.
Q. What types of management or software tools are required to manage the Interceptor? A: The Interceptor can be locally managed by serial console, and remotely managed by Telnet or Secure Shell (SSH). The INTERCEPTOR can be accessed via terminal programs such as HyperTerminal or TeraTerm.
Q. Doesn’t the requirement to respond to alarms create an additional need for manpower? A: Since Interceptor eliminates the requirements to perform daily visual inspections of the PDS, the resources formerly used to conduct that task are no longer needed. A key thing to remember is that Interceptor prompts you when to conduct an inspection versus conducting them day-in-and-day-out whether a threat to the network exists or not. Therefore the use of Interceptor actually reduces the manpower necessary to secure a network.
Q. Who typically monitors the Interceptor and how do they receive the alarms generated? A: Monitoring responsibility is established on an organization-by-organization basis. Typically it is performed by Secu¬rity/Military Police, IT Help Desks or Network Operations & Security Centers (NOSCs). If Security/Military Police forces are used, then the Interceptor is usually integrated via dry contact interfaces into the existing building security system, which those forces routinely monitor. If monitored by IT departments or NOSCs, then the alarms are usually received via SNMP traps.
Q. Which organizations have deployed Interceptor? A: As of this printing Interceptor has been deployed by the US Air Force, US Army, US Coast Guard, US Marine Corps, CENTCOM, Department of Homeland Security, Defense Intelligence Agency, Department of Justice, DoD Department of Inspector General, Naval Surface Weapons Center, Naval Undersea Warfare Center, National Reconnaissance Office, SPAWAR, STRATCOM, The Pentagon, numerous large and small systems integrators, major defense contractors.
If you have specific questions about Interceptor or alarmed carrier PDS, email me at Amanda@networkintegritysystems.com.
Friday, January 29, 2010
Fact Friday #2
Welcome to the NIS Blog. Today’s entry contains FAQs Part 2:
Q. Does the Interceptor have an impact on the bandwidth of the network? A: Interceptor is a physical layer device, and does not touch, process or verify the network data or the National Security Information, therefore no bandwidth bottlenecks are created allowing full utilization of the network – up to 10Gbps and beyond.
Q. Is it necessary to perform an auto-configuration before Interceptor can start protecting a network? A: The Interceptor is set at the factory with a default profile that enables it to be placed into service and protect the network immediately. Once installed, performing an autoconfiguration while the unit continues to monitor optimizes the protection profile.
Q. Which organizations have approved Interceptor? A: As an alarmed carrier hardened Protected Distribution System (PDS) compliant with the requirements of NSTISSI 7003, the instruction that governs the transmission of unencrypted National Security Information, INTERCEPTOR™ is a fully approved PDS option. INTERCEPTOR also complies with requirements AFI 33-201 (Air Force), AR 25-2 (Army) and NAVSO P-5239-22 (Navy). It is also listed on the US Air Force CTTA Approved Product List for PDS Alarm Systems as well as the US Navy TEMPEST PDS Approved Product list. INTERCEPTOR has been reviewed by the DISA DSAWG and confirmed as a viable tool for SIPRNet protection subject to approval by local approval authorities.
If you have specific questions you would like us to address, feel free to email me at Amanda@networkintegritysystems.com.
Q. Does the Interceptor have an impact on the bandwidth of the network? A: Interceptor is a physical layer device, and does not touch, process or verify the network data or the National Security Information, therefore no bandwidth bottlenecks are created allowing full utilization of the network – up to 10Gbps and beyond.
Q. Is it necessary to perform an auto-configuration before Interceptor can start protecting a network? A: The Interceptor is set at the factory with a default profile that enables it to be placed into service and protect the network immediately. Once installed, performing an autoconfiguration while the unit continues to monitor optimizes the protection profile.
Q. Which organizations have approved Interceptor? A: As an alarmed carrier hardened Protected Distribution System (PDS) compliant with the requirements of NSTISSI 7003, the instruction that governs the transmission of unencrypted National Security Information, INTERCEPTOR™ is a fully approved PDS option. INTERCEPTOR also complies with requirements AFI 33-201 (Air Force), AR 25-2 (Army) and NAVSO P-5239-22 (Navy). It is also listed on the US Air Force CTTA Approved Product List for PDS Alarm Systems as well as the US Navy TEMPEST PDS Approved Product list. INTERCEPTOR has been reviewed by the DISA DSAWG and confirmed as a viable tool for SIPRNet protection subject to approval by local approval authorities.
If you have specific questions you would like us to address, feel free to email me at Amanda@networkintegritysystems.com.
Friday, January 22, 2010
Fact Friday #1
We get a lot of the same questions from our customers and partners about how Interceptor works. My next few blog posts will attempt to address some of the most commonly asked questions. Here’s FAQs Part 1:
Q. How does Interceptor™ detect an intrusion into a fiber optic cable?
A: Interceptor launches a monitoring signal into a pair of fibers of the optical cable being protected, which turns the entire cable (up to 144 fibers) into a sensor. When any component of the cable is abnormally handled, for instance during an intrusion attempt, the monitored fibers sense the disturbance and Interceptor reports the event.
Q. How does Interceptor distinguish between true intrusions and everyday events that may cause nuisance alarms?
A: Interceptor incorporates a patented Smart Filtering™ technology to “auto-configure” itself and learn a baseline of normal, routine, benign, non-threatening affects upon the cable system. These normal events are thereafter ignored resulting in the elimination of false alarms.
Q. What type of fiber does Interceptor require for monitoring?
A: Interceptor uses the standard communications fibers inside the cable to perform the monitoring, and models are available for dark (unused) or active (transmitting data) fibers.
Q. Does Interceptor protect the cable or just individual fibers?
A: For most cable designs, monitoring as few as 2 fibers within the cable can protect an entire 144-fiber cable. If ingress into the cable is attempted, the protected fibers will sense the disturbance and issue an alarm.
Q. Is an Interceptor required at both ends of the cable run being protected?
A: In the case of dark fiber monitoring, a single Interceptor is required at one end of the cable. For monitoring active fibers, a single Interceptor Plus™ is required at one end of the cable along with a small passive device (Remote Termination Unit) at the far end.
Q. To how many separate buildings or drops can a single Interceptor provide a secure connection?
A: A single Interceptor can provide a secure connection to a minimum of four locations and typically, based upon the network architecture, to as many as sixteen and sometimes up to thirty-two.
If you have specific questions you would like us to address, feel free to email me at Amanda@networkintegritysystems.com.
Q. How does Interceptor™ detect an intrusion into a fiber optic cable?
A: Interceptor launches a monitoring signal into a pair of fibers of the optical cable being protected, which turns the entire cable (up to 144 fibers) into a sensor. When any component of the cable is abnormally handled, for instance during an intrusion attempt, the monitored fibers sense the disturbance and Interceptor reports the event.
Q. How does Interceptor distinguish between true intrusions and everyday events that may cause nuisance alarms?
A: Interceptor incorporates a patented Smart Filtering™ technology to “auto-configure” itself and learn a baseline of normal, routine, benign, non-threatening affects upon the cable system. These normal events are thereafter ignored resulting in the elimination of false alarms.
Q. What type of fiber does Interceptor require for monitoring?
A: Interceptor uses the standard communications fibers inside the cable to perform the monitoring, and models are available for dark (unused) or active (transmitting data) fibers.
Q. Does Interceptor protect the cable or just individual fibers?
A: For most cable designs, monitoring as few as 2 fibers within the cable can protect an entire 144-fiber cable. If ingress into the cable is attempted, the protected fibers will sense the disturbance and issue an alarm.
Q. Is an Interceptor required at both ends of the cable run being protected?
A: In the case of dark fiber monitoring, a single Interceptor is required at one end of the cable. For monitoring active fibers, a single Interceptor Plus™ is required at one end of the cable along with a small passive device (Remote Termination Unit) at the far end.
Q. To how many separate buildings or drops can a single Interceptor provide a secure connection?
A: A single Interceptor can provide a secure connection to a minimum of four locations and typically, based upon the network architecture, to as many as sixteen and sometimes up to thirty-two.
If you have specific questions you would like us to address, feel free to email me at Amanda@networkintegritysystems.com.
Monday, December 7, 2009
Interceptor alarmed carrier PDS provides information assurance for National Security Information on SIPRNet and JWICS networks
Network Integrity Systems recently published a white paper that addresses the advantages of alarmed carrier PDS. Below is a summary of the white paper. Go to http://www.networkintegritysystems.com/IA%20White%20Paper1.pdf for the full text.
With the explosion of SIPRNet and classified information systems throughout DoD and civilian government agencies, the potential vulnerabilities and resulting need for compensating measures to protect our National Security Systems has increased exponentially. With the amplified focus on Information Assurance, the Interceptor™ Optical Network Security System is being increasingly leveraged due to its ability to reduce the cost and complexity of network deployments while also significantly enhancing network security and information assurance.
Current situation:
- The Committee on National Security Systems and NSTISSI 7003 provide the overarching national guidance to all DoD and civilian agencies for the protection of wireline and optical fiber Protective Distribution Systems (PDS) used to transmit unencrypted National Security Information. Per NSTISSI 7003 “…the emphasis of a PDS should be placed on ‘detection’ of attempted penetration in lieu of ‘prevention’ of penetration.”
- Because of the emphasis on detection, Hardened Carrier PDS installations constructed of rigid metallic conduit require daily periodic visual inspections (PVIs) as the sole means to detect unauthorized access or tampering with the PDS.
- With the recent growth of secure networks, the requirement to perform PVIs places a severe strain on manpower and results in infrequent or potentially neglected visual inspections.
- To conduct the required PVIs, the PDS must be installed below the ceiling and in plain view. However, this makes the PDS obvious and readily accessible to any and all building occupants and visitors and ultimately more vulnerable to overt and covert attacks.
- To prevent unauthorized individuals from entering the PDS system via modular raceway, most agencies have established compensating measures such as the epoxying of all seams or through a more encompassing visual inspection that requires specialized training provided through a third party.
- Alarmed Carrier PDS addresses the primary intent of NSTISSI 7003 (detection) by replacing the PVIs with continuous monitoring of the raceway. This results in substantial savings in manpower – but more importantly, it eliminates the risk that an intrusion into the PDS goes unnoticed due to infrequent or neglected human inspections.
- An alarmed system provides consistent and persistent protection, and only notifies personnel to perform an inspection in order to investigate potential suspicious activity.
- Since alarming the PDS eliminates the requirements to perform daily visual inspections of the PDS, the resources formerly used to conduct that task can be assigned to other activities.
- Since visual inspections are not required for an alarmed PDS, the rigid metallic carrier system can be placed in a non-visible location (i.e. below the floor or above the ceiling), which makes it much more difficult for a would-be intruder to gain access.
- Since the carrier is out of sight, simple EMT can be used versus more expensive modular raceway products.
- Unlike traditional alarm carrier systems that monitor attacks on the raceway, the Interceptor Optical Network Security System monitors fibers within the cables being protected, making the entire cable sensitive to abnormal manipulation and handling.
- When the threat level warrants it, some agencies and military branches deem as a compliant PDS, flexible interlocking armored cables monitored by an Interceptor, installed without a rigid metallic carrier.
- With the Interceptor PDS and Armored Cable solution, the network cabling, with its continuous protective armor, can now be run from point-to-point with no vulnerable access points at various junctions along the PDS.
Subscribe to:
Posts (Atom)