Software

Star Lab Titanium

Star Lab’s Titanium Security Suite offers the most robust Linux system hardening and security capabilities available on the market today for operationally-deployed Linux systems. Designed using a threat model that assumes an attacker will gain root (admin) access to your system, Titanium maintains the integrity and confidentiality of critical applications, data, and configurations while assuring operations. Titanium is compatible with

  • RedHat,
  • CentOS,
  • Ubuntu,
  • RedHawk,
  • and other embedded Linux distributions.

Star Lab – a Wind River company

 

Titanium Capabilities:

  • Denies by default access to protected entities even from root-level users
  • Controls and restricts direct access to system hardware resources, such as peripherals and storage devices
  • Enables secure software updates

  • Prevents unsigned module loading and enforces keychain controls
  • Limits an attacker’s ability to debug or subvert protected applications and their libraries
  • Removes kernel functionality and features

  • Authenticates protected entities, verifying that they have not been altered, and only decrypting files as needed (decryption keys are protected and stored out-of-band from attacker)
  • Ensures sensitive applications, data files and configurations are cryptographically bound to a particular deployment hardware, defeating any effort to copy and run applications on non-authentic or instrumented hardware
  • Verifies file signatures, checksums and provenance parameters (such as file location) on data and configuration files before they can be accessed by a protected application REMAINS SECURE DURING RUNTIME AND REST

  • Will soon be certified as compliant with four distinct Common Criteria (NIAP) Protection Profiles making it perfect for use in National Security Systems
  • Simultaneously receiving approval from the National Security Agency’s Commercial Solutions for Classified (CSfC) program as a composite solution for data at rest, both file-based and software full disk
  • Comes with a comprehensive mapping to the NIST 800-53 risk management framework (RMF) controls

 

ds_popup_1