Summer 2009
Welcome to Nexor News for Summery 2009, helping you to keep up-to-date with the latest information and announcements.
In this issue:
Interoperability News
Nexor Launches New Chat Guardian for High Assurance Protection of Instant Messages
The new Nexor Chat Guardian is a high assurance instant messaging guard appliance running on HP Proliant hardware with SELinux. Chat Guardian is the first in the new Nexor Guardian family of data guards. It provides network separation for multiple domains and validates that inbound and outbound chat messages conform to the security policy of each protected domain. We developed Chat Guardian in response to urgent operational requirements and it has successfully completed initial demonstrations for UK MoD. For further details, follow this link here.
New Nexor ISTAR Security Gateway Goes on Exercise
Our new Nexor ISTAR Security Gateway is to be tested in an operational environment during a major international exercise this month. Built for the UK MoD Force Protection IPT, the gateway combines Nexor guards and gateways with third party firewall and data diode technology to enable a highly secure one-way flow of messages from lower to higher domains. The solution handles both streaming video and SMTP based messaging with attachment checking and is deployable in low bandwidth environments. Further details will be available later this month.
Nexor Sentinel 3s Shipped in First Week of Release
The latest in Nexor’s messaging guard family, Sentinel 3.0, has been shipped to two major homeland security customers. Running on SELinux on an HP Proliant Server, Sentinel 3 is delivered as an appliance. It mirrors the functionality of Sentinel 2.0, which is deployed in over 30 NATO locations and is the mailguard of choice for NAMSA (the NATO Maintenance and Supply Organisation). Follow the link here for more details.
NATO Information Exchange Gateways Explained
Having spent considerable time with NATO understanding the thinking and plans for the NATO Information Exchange Gateways (IEGs), we have published two new papers to help the NATO community understand the facts behind the IEG and the art of the possible for creating a solution using Nexor technology. For more information please see the White Paper NATO Information Exchange Gateways, Reference Architecture, follow the link here and the Solution Paper NATO Information Exchange Gateways, Nexor Technical Position. Follow the link here for more details.
Security Policy News
Nexor Endorses Vendor Independent XML Security Policy Information File Format
In line with our commitment to implement standards-based and open solutions, we are pleased to confirm support for the standard-based SPIF format from www.xmlspif.org to help increase interoperability across products. Adoption of this vendor independent format will help to reduce deployment costs and ensure security policies are implemented consistently. For more information please see the recent press release by following the link here.
Call for Funding Support for Research into Label-Based Access Control
We are continuing to research the role of labelling as a key enabler to secure data sharing. ISTAR data fusion and government records archiving are two examples of where classified information needs to be labelled appropriately to allow more effective management of data throughout its lifecycle. Our research proposal explains the challenges, indicates where technology currently exists and where further research is required. If you can contribute, please see the full proposal by following the link here for more details and info [at] nexor [dot] com (subject: Call%20for%20Funding%20Support%20for%20Research%20into%20Label-Based%20Access%20Control) (contact us).
Data Loss Prevention – The Human Factor
In many of the recent high-profile cases of sensitive data loss from government, it appears that the human element is at fault, not the technological solutions. Nexor has been working with cyber psychology experts at Nottingham Trent University, looking at the factors that influence human behaviour towards security. Read Andrew Kays’ (Nexor’s Head of Development) published article in the Security Zone of Computer Weekly — for more insight into this topic follow the link here.
Services News
Nexor Selects Ounce Labs to Enhance Secure Coding Capability
We have invested heavily in ensuring our commercial off-the-shelf products and customised appWe have invested heavily in ensuring our commercial off-the-shelf products and customised applications are securely coded. Adoption of the award-winning Ounce Labs’ Static Application Security Testing (SAST) tool provides an additional line of defence in our secure development process. For further details please follow the link here or visit www.ouncelabs.com
Nexor Launches Knowledgebase for Supported Customers
Further to the launch of our new web site in March, the Nexor Knowledgebase is now available to all supported customers. Available via the Nexor Self Service Portal the Knowledgebase provides a number of tips and solutions to help you make the most of your Nexor products. The Knowledgebase will be updated on a regular basis and can be searched either prior to or after raising a case.
Corporate News
Nexor and Military Reservist Honoured at Downing Street Reception
Nexor employee, Petty Officer Andrew Robinson, recently completed a six month tour of duty in Afghanistan. Andrew spent his time in Helmand province providing IT support to 3 Commando Brigade.
Steve Kingan, Nexor’s Chief Executive Officer, attended a reception at Downing Street on 26th June where Prime Minister, Gordon Brown, paid tribute to members of the Reserve Forces and employers from across the UK, thanking them for the valuable contribution they have made and continue to make to the UK's Armed Forces. For full details, follow the link here.
Events
25th – 26th June: eema European e-Identity Conference
Colin Robbins, Nexor’s CTO, presented “Identity Federation in Government – An Opportunity for Privacy Enhancement”. Colin discussed the importance of achieving the right people-technology balance to address the challenge of data loss prevention. Technology alone cannot solve the problem; people must be trained, motivated and supported to adhere to policies. The presentation referred to innovative new psychological research findings, which Nexor has sponsored. For further details follow the link here.
8th – 11th September: Defence Systems and Equipment International
Nexor will be attending the exhibition and is pleased to host meetings with visiting customers during exhibition week. For further details on the event go to: www.dsei.co.uk
21st – 25th September: NATO Information Assurance Symposium
Nexor will be giving a keynote speech and hosting one of the workshop/seminar sessions on the subject of Security Labelling. For further details on the event follow the link here.
20th – 22nd October: RSA Conference Europe
Colin Robbins will present “Open Architecture for Advanced Data Guarding” and promote the concept of an open architecture for data loss prevention in IT based systems to ensure that information sharing is achieved in a controlled manner, consistent with the applicable security policy. For further details on the event follow the link here.
