India Certifies Fox IT's Fox DataDiode for Use by Government Agencies
Delft, The Netherlands, Feb 25, 2013 (PRWeb.com via COMTEX) --
Fox IT today announced that its Fox DataDiode, has been evaluated under the terms of the Indian Common Criteria Certification Scheme (IC3S) and has met EAL4+, the highest possible Common Criteria requirements for use in India. The Fox DataDiode was already Common Criteria EAL7+ certified in Europe --the highest Common Criteria Evaluation Assurance Level recognized--and approved for secure network connections up to and including NATO Secret. It is deployed in many countries to protect sensitive government and industrial control systems used in critical national infrastructure, such as the energy sector, telecommunications, and water systems.
This latest certification was performed by India's Department of Information Technology Standardisation Testing and Quality Certification (STQC) Directorate. STQC certification further enhances trust of Common Criteria certified products within India through the Indian Government's independent third-party certification. Well-known, high-profile government agencies are expected to be among the first adopters of Fox DataDiode to improve cyber security assurance and the efficiency of information flows involving high-security systems. Fox DataDiode is available in India through Fox IT partner High-Tech Technologies (HTT) based in Mumbai.
One-way physical firewall safely connects networks with different security levels
Fox DataDiode is a unidirectional hardware device, which is used at the boundary of two computer networks. It allows data to travel only in one direction, in real time. For its use to protect secrets, information can be passed from a lower security network to a higher security secret network, but not vice versa. For its use to protect critical infrastructure like energy plants or water facilities, selected information can be pushed from a trusted Industrial Control System (ICS) to an external network, while the facility remains digitally inaccessible from the outside. It does not contain decision logic, software or firmware and cannot be misconfigured, eliminating any possibility of software malfunctions, malware, tampering, online attacks or human error. The one way physical connection transfers information optically using a light source and corresponding photocell to ensure data can pass in only one direction. Fibre-optic cables minimize electromagnetic radiation when the device is connected between low and high security servers.
Highest protection possible for national critical IT infrastructures
Without Fox DataDiode, data transfers to high security networks that employ either bi-directional firewalls or "air gap" data transfers are vulnerable, since both security measures are susceptible to human error and malicious activity. Firewalls and data access permissions can be wrongly configured. Portable media used for air gap transfers such as USB drives can be lost or infected with malware--for example, the well-publicized Stuxnet computer worm originally proliferated in this way. Fox DataDiode not only eliminates these risks, but secures information transfers in real time.
Rigorous product and supply chain testing validates performance and security integrity
Certification was conducted at India's Common Criteria Test Laboratory (CCTL) in Kolkata and included an onsite visit to Fox IT headquarters in Delft to validate supply chain security. Fox DataDiode's product configuration, performance testing, documentation and vulnerability assessment with hypothetical attack scenarios were performed according to Common Evaluation Methodology and CCTL Kolkata operating procedure, and are described in detail in the publicly available Certification Report, posted here: http://www.commoncriteria-india.gov.in/Documents/foxit/CR-FFHDD.pdf.
"We have a backlog of customers who have expressed interest in Fox DataDiode and were waiting for this certification to proceed with their purchase," said Dr. Dinesh Mhatre, CEO of High-Tech Technologies. "We expect this area of our business to surge from the pent up demand."
"India is a founding member of the International Organisation of Standardisation and responsible for the development of many ISO standards. Their independent certification is characterized by rigorous product testing and in-depth validation of documentation and supply chain. This certification from India further assures all Fox DataDiode users across the globe that our technology is the finest in the world for safely connecting high-security networks," said Menno van der Marel, CEO of Fox IT.
For more information about Fox DataDiode, visit http://www.datadiode.eu.
About Fox IT
Fox IT prevents, solves and mitigates the most serious threats as a result of cyber attacks, fraud and data breaches with innovative solutions for government, defence, law enforcement, critical infrastructure, banking, and commercial enterprise clients worldwide. Our approach combines human intelligence and technology into innovative solutions that ensure a more secure society. We develop custom and packaged solutions that maintain the security of sensitive government systems, protect industrial control networks, defend online banking systems, and secure highly confidential data and networks. For more information, visit http://www.Fox-IT.com.
About High-Tech Technologies
High-Tech Technologies (HTT) specializes in products and services for information security, digital forensics, data storage and recovery, and biometrics. HTT's highly qualified and experienced team of professionals provide a broad range of solutions tailored to the specific needs of public sector and commercial enterprise clients. In all client engagements, HTT nurtures long term relationships with the guiding principles of honesty, integrity, best value for money and commitment to client success. HTT's unique and cost-effective solutions throughout India include fully staffed 24/7/365 help desk support. For more information, visit http://htt.co.in.
Read the full story at http://www.prweb.com/releases/2013/2/prweb10466056.htm
[ InfoTech Spotlight's Homepage ]