SWIPSY

SWIPSY was a firewall toolkit produced by the Defence Evaluation and Research Agency in the UK[1] (later QinetiQ). The SWIPSY toolkit was an ITSEC E3 (equivalent to Common Criteria EAL4) evaluated product[2] that allowed additional code to be added to its security ‘compartments’ without affecting the evaluation status of the toolkit itself.

SWIPSY had security properties that assured network and process separation. In particular processes communicating with one network could not communicate directly with the other network other than by ‘trusted mover agents’ that in turn force data to be passed to the format and content checkers. SWIPSY ran on a Trusted Solaris 8 platform, utilising its Mandatory Access Controls to enforce separation between compartments.

SWIPSY, which stood for SWitch IP SecurelY, was used to build an SNMP firewall system[3] called MIDASS.[4]

SWIPSY technology was licensed by Clearswift for use in its Deep-Secure line of guard products.[5]

SWIPSY was used as the basis for a guard for the Citrix ICA protocol by QinetiQ.[6]

References

  1. ^ Dean, Tim; Wyatt, Graham (April 2004). Information Exchange between Resilient and High-Threat Networks: Techniques for Threat Mitigation. RTO IST Symposium on “Adaptive Defence in Unclassified Networks”. Toulouse, France. Archived from the original on April 8, 2013.{{cite book}}: CS1 maint: location missing publisher (link)
  2. ^ "SWIPSY Firewall Platform Security Target" (PDF). August 2000.
  3. ^ "Management In DomAin-based Secure Systems (MIDASS) (United Kingdom), Encryption and security".
  4. ^ "MIDASS: Management in Domain Based Secure Systems" (PDF).
  5. ^ "Directory of Infosec Assured Products" (PDF). October 2010.
  6. ^ "SyBard ICA Guard" (PDF).

Content Disclaimer

Informasi ini disarikan dari Wikipedia dan disajikan kembali untuk tujuan edukasi. Konten tersedia di bawah lisensi CC BY-SA 3.0. Kami tidak bertanggung jawab atas ketidakakuratan data yang bersumber dari kontribusi publik tersebut.

  1. The information displayed on this website is sourced in part or in whole from Wikipedia and has been adapted for the purpose of restating it. We strive to provide accurate and relevant information, however:
  2. There is no guarantee of absolute accuracy. Wikipedia is an open, collaborative project that can be edited by anyone, so information is subject to change.
  3. It is not intended to constitute professional advice. The content displayed is for informational and educational purposes only. For important decisions (e.g., medical, legal, or financial), please consult a professional.
  4. Content copyright. Wikipedia is licensed under the Creative Commons Attribution-ShareAlike License (CC BY-SA). This means that content may be reused with appropriate attribution and shared under a similar license.
  5. Responsible use. Any risk arising from the use of information from this website is entirely the responsibility of the user.