September 22, 2010, Montreal, Canada – Embvue Inc., (www.embvue.com) – a leading provider of certifiable embedded systems, network and testing products, and professional services for mission-critical, safety-critical and security-sensitive systems, announced today the launch of its latest product line – Isis.
Isis products and tools includes a Multiple Independent Levels of Security (MILS) software-based secure end system Ethernet network stack, a MILS software-based secure switch / router and a comprehensive, purpose-built, tool suite to assist customers with designing, implementing and supporting secure networks. Isis deals with security at the per virtual link level, meaning that switches and routers no longer need to have ports allocated to a single security level, providing much greater secure network flexibility and expandability. Isis is targeted to achieve Common Criteria EAL 5+.
“We are pleased to announce that Isis is ready for launch in the important Ethernet network security market,” said Phil Cole, VP Sales and Marketing at Embvue. “Embvue has been intimately involved with the safe, deterministic Ethernet space for several years and has already brought to market three successful products to serve it (A-Stack, A-Switch and Prodigy). Isis is an extension of these products to adapt them for use in the secure networks market, which we see growing significantly in importance over the coming years. The Isis product line has been developed rigorously to DO-178B Level A, so it is ideally suited to common criteria evaluation, and since it is a modular and 100% software-based, relatively few enhancements were required to adapt it for use in the security market”
Together, Isis provides all of the components required to create a secure MILS network, and the Isis tools provide the capability to greatly simplify and partially automate the otherwise difficult process of simulating, integrating, optimizing, deploying, and monitoring a secure network that comprises many different components. Additionally, the Isis tools provide the ability to interface to the software Partitioning Communication System (PCS) to allow operators with the appropriate security clearance to manage the security policies for the network as they change.
The Isis product line address major industry concerns including :
Industry Standardization : Isis is based upon the tried and tested aviation industry standard for airborne Ethernet networks.
Complete Solution for Security : The Isis product family includes a secure switch / router software implementation, a secure end system network stack and a complete set of networking tools that are provided to assist customers in designing, simulating, integrating, configuring, optimizing and monitoring the network.
Network Flexibility is Built In : Network configuration is actually the biggest headache for integrators. The Isis tools make it easy for customers to configure and re-configure entire networks automatically once the desired modifications have been made in the Isis network simulation tool. This makes secure networks much quicker and more reasonable to deploy initially, and much quicker and more reasonable to manage changes to network devices or additions to the network as they occur.
Flexibility to Manage Security Policy : Isis implements a software Partitioning Communication System (PCS) in both end systems and switches. The PCS is what controls the way the security policy in force is implemented. The Isis tools allow access to the PCS for authorized users to allow them the ability to modify the in-use security policy as security threats or the environment change.
Platform Independence : Isis is a 100% software product. It has been architected by Embvue to provide the maximum possible separation from the underlying hardware and operating system upon which it runs (true of both end systems and switches/routers). This provides customers the flexibility to have Embvue port its products to whatever hardware/RTOS platform they chose.
More Control than Traditional Hardware Solutions : For most existing secure hardware implementations, the security level for a given switch port is set ahead of time and is fixed from that point on. This makes the hardware network implementations very rigid and not readily expandable. Isis controls security and routing at the virtual link level, meaning that switches and routers do not need to be configured with a single security level assigned to each physical port (physical ports can handle multiple different security levels). This provides enormous network flexibility, allows for growth and reduces the overall number of switches/routers required. This in turn reduces cabling, quantity of hardware, system weight, and system production time.
Provides Many Customer Options : Embvue is happy to discuss licensing Isis a number of different ways, depending upon customer wishes, capabilities and budget. Embvue can help customers produce their own secure products based upon Embvue technology, can integrate its technology with other COTS products that the customer chooses, or can integrate its technology with other products and deliver a complete solution. Licensing schemes for all of these options are possible.
About Embvue
Embvue is an experienced, process-driven, systems and software engineering company specializing in the provision of products and services for customers developing complex, real time, mission or safety-critical embedded systems. Additional information is available at www.embvue.com