ClearCube Secures Centralized Computing Solutions with Mocana

July 13th, 2010

San Francisco, CA (PRWEB) July 14, 2010
Mocana Corporation, a company that focuses on securing networked devices, today announced that ClearCube Technology, Inc. has licensed its NanoSSH and NanoSSL technology to securely manage its centralized and virtualized computing solutions. ClearCube’s solutions allow users to integrate powerful PC blade technology, cutting edge user access devices and expert professional services to give organizations comprehensive, high performance centralized computing and virtual desktop solutions. With a growing proportion of enterprise business being done on client side devices in centralized/virtualized environments, secure management is critical.

Mocana’s NanoSSH and NanoSSL are embedded in ClearCube’s Remote Management Module (RMM) in the chassis, centralized in a remote datacenter, to secure all communication between the RMM and ClearCube’s Sentral management software suite. Sentral and the RMM provide a wide range of management functions for virtual machines, centralized PC blades, servers, chassis, and more. Mocana’s technology will help organizations leverage the power and flexibility of ClearCube’s Centralized and Virtualized solutions while securing the management channels.

NanoSSL is Mocana’s SSL/TLS solution designed to speed product development while providing best-in-class device security in resource-constrained environments like the thin clients used by ClearCube. NanoSSL is open-standards-based, extensible, platform-agnostic and includes an optional government-certified FIPS 140-2 level-1- validated crypto core. NanoSSL includes a full-featured key generator and certificate management client, and supports government Suite B crypto algorithms and the new RFC standard for TLS 1.2.

NanoSSH is Mocana’s SSH client/server solution with support for X509.v3 certificate-based authentication and comes with RADIUS client, specifically designed to speed product development while providing best-in-class device security services for resource-constrained environments. NanoSSH provides a holistic approach for securing networked devices and services, and is ideally suited for resource-constrained devices as well as high-traffic enterprise and federal environments where performance is critical. NanoSSH is open-standards-based, extensible, extremely small footprint, platform-agnostic and features an optional government-certified FIPS 140-2 level-1-validated crypto core.

Both NanoSSH and NanoSSL solutions are GPL-free, so developers can feel confident about the long-term integrity of their intellectual property. New developers can request a free trial of Mocana products at www.mocana.com. “ClearCube’s model is helping to lead the shift towards centralized and cloud computing, but with appropriate care taken for device security,” said Adrian Turner, CEO of Mocana. “The addition of heterogeneous client-side devices to this model adds another dimension to the security challenge. That’s why ClearCube is using Mocana, to make sure that today’s most flexible centralized computing architectures are safe for mission-critical users, like those in government. ”

“One of the key value propositions of our centralized and virtualized solutions is our ability to keep the management of the different components in the system simple and secure”, said Raj Mellacheruvu, Director of Engineering at ClearCube Technology. “With Mocana’s technology we are able to securely communicate with our remote management modules over the network.”

About Mocana

Mocana secures the “Internet of Things” – the 20 billion datacom, smartgrid, federal, consumer, industrial and medical devices that connect across every sector of our economy. These devices already outnumber PC’s on the Internet by five to one, representing a $900 billion market that’s growing twice as fast as the PC market. Every day, millions of people use products sold by over 100 companies that leverage Mocana’s Device Integrity software, including Dell, Cisco, Honeywell, General Electric, General Dynamics, Avaya, Harris and Radvision, among others. Mocana won Frost & Sullivan’s Technology Innovation of the Year award for 2008 for Device Security, and was named to the Red Herring Global 100 as one of the “top 100 privately-held technology companies in the world” in January 2009.

Everything You Ever Wanted To Know About Mobile App Development

July 12th, 2010

As mobile computing continues to grow with the frequent introduction of new devices worldwide, the mobile application development market becomes an increasingly significant portion of the software industry. However, with the multitude of mobile platforms and delivery options, the field is as fragmented and varied as it is vast.

A new report from VisionMobile aims to demystify the current mobile development landscape, with a comprehensive study based on research conducted with over 400 developers for various platforms such as iPhone, Symbian, Android and Windows Mobile. According to the report,

Android stands out as the platform most popular among mobile developers. Survey results suggest nearly 60 percent of all mobile developers recently developed on Android, assuming an equal number of respondents with experience across each of eight major platforms. Second in terms of developer mindshare is iOS (iPhone), outranking Symbian and Java ME, which were in pole position in 2008.

In addition, the research document contains data regarding:

  • the number of apps available for various platforms and in various markets
  • the differences in the learning curves that developers face for different platforms
  • the effect of app stores and advertising on sales and revenue

Memory Tokens That Can Stand The Heat

July 12th, 2010

To combat the rising incidence of counterfeit medical products, medical device manufacturers can implement removable memory tokens that contain product authentication keys and other security features. However, the continued reuse of these small, detachable tokens in demanding hospital and healthcare settings can be problematic.

With this in mind, Datakey Electronics produces an anti-counterfeit memory token system that is not only rugged, but can survive repeated sessions of high temperature sterilization without failure, while retaining data. And according to Datakey,

[Using] removable memory for product authentication/anti-counterfeit…opens up a host of other capabilities, including: tracking (and limiting) the number of times an attachment has been used, automatically identifying the model of the attachment and uploading any model-specific parameters, uploading any calibration information that is unique/specific to that particular attachment, and recording settings and other usage data to ensure the device was used properly according to the manufacturer’s instructions.

In addition, the Receptacle on the base controller can be used for secondary uses, including: in-field firmware updates, medical personnel access control, rights management, and more!

Imagining Cyber-Warfare

July 11th, 2010

A new class of warfare is on the horizon. Governments worldwide are scrambling to prepare for the possibility of conflict in the “fifth domain” – cyberspace. Will World War III take place on the internet? The possibility is being explored, as documented in  a new article from The Economist.

But how to prepare for a war waged in the digital realm? And what are the stakes? As more and more of the world’s infrastructures are given access points on the web, the possibility of collateral damage inflicted by electronic attacks becomes increasingly real. Of particular concern is the security of the smart grid systems that will one day encompass our electrical networks. Opinions vary on the vulnerability of SCADA systems (networks that regulate industrial systems like power plants), however the consensus is that serious risks are present.

The future of cyber-warfare is uncertain, yet it will undoubtedly present myriad new challenges for peacekeepers such as NATO and governments themselves.

Government Introduces “Perfect Citizen”

July 8th, 2010

The Wall Street Journal reports on a new computer network surveillance program being launched by the federal government. The project, dubbed “Perfect Citizen,” will be led by the National Security Agency (NSA) who have already contracted defense heavyweights Raytheon for the project.

Perfect Citizen will use sensor-based surveillance tools to monitor computer networks, both private sector and government-operated, that connect the nation’s critical infrastructure systems–including the power grid, nuclear plants, air traffic control and others–in an effort to detect and prevent serious cyber attacks.

According to The Wall Street Journal,

Perfect Citizen will look at large, typically older computer control systems that were often designed without Internet connectivity or security in mind. Many of those systems—which run everything from subway systems to air-traffic control networks—have since been linked to the Internet, making them more efficient but also exposing them to cyber attack.

The goal is to close the “big, glaring holes” in the U.S.’s understanding of the nature of the cyber threat against its infrastructure, said one industry specialist familiar with the program….

The information gathered by Perfect Citizen could also have applications beyond the critical infrastructure sector…serving as a data bank that would also help companies and agencies who call upon NSA for help with investigations of cyber attacks, as Google did when it sustained a major attack late last year.

We recently posted about the 60 MINUTES investigation into critical infrastructure security that not only declared the U.S. unprepared for cyber attacks on the infrastructure, but described how it was already being hacked.

50 Arrests Made in Smartphone Spyware Probe

July 7th, 2010

In sweeping raids conducted throughout the country last week, Romanian officials rounded up some 50 individuals accused of illegal espionage using an off-the-shelf product. Police have also arrested a 30-year old IT specialist accused of supplying the illegal software to suspects. According to Softpedia, he may have been reselling FlexiSPY, a product that advertises monitoring capabilities for a variety of smartphone platforms such as iPhone, Android and Windows Mobile.

Among the suspects apprehended are several government officials, reportedly including a police officer, judge and a former member of Parliament. Other suspects include businessmen, doctors and engineers who used the spying software for a variety of purposes including the real-time monitoring of phone calls, retrieval of SMS text logs and even transforming the affected phone into a remote bugging device. While the FlexiSPY software suite was still being offered online as of this writing, it is unclear whether other countries will pursue measures against sellers of this questionable application.

Understanding EAX’ Smart Grid Security

July 6th, 2010

Much of the latest smart grid and AMI technology relies on the open ANSI C12.22/IEEE1703 standard for the transport of meter data over networks. And this specification relies on a security mechanism called EAX’, a modification of the EAX mode cryptography scheme.

A new report provides a concise explanation of how this security protocol functions. Download the full PDF here.

As we recently posted, smart grid security is becoming a booming industry unto itself, with billions of dollars to be spent in the coming years.

iTunes Store Hacked by Rogue Developer

July 5th, 2010

A developing story on Engadget reports that, just this weekend, the top 50 books by revenue category on the iTunes App Store had been dominated by 42 titles from a single developer. Additionally, these titles appeared to have virtually no user reviews, and featured possibly stolen content.

But even more concerning, Engadget reports that–while still unconfirmed–these rogue book apps were catapulted up the sales chart by fraudulent charges to unknowing iTunes customers for downloading the books — purchases these customers never authorized.

Since the initial report, Apple has confirmed the situation and has responded by removing the developer in question, and all of his apps, from the iTunes store. Apple has not commented, however, on any fraudulent credit card charges reportedly linked to this scenario.

New Smart Grid Security Draft Released

July 1st, 2010

The Advanced Metering Infrastructure Security (AMI-SEC) Task Force has released the second draft of the Security Profile for Advanced Metering Infrastructure for public download. Available in PDF format, the document provides guidance for implementing security within a number of smart grid functionalities–including home area network interfaces and meter data management systems–to organizations that are currently developing AMI solutions.

The full PDF is available here.

The Evolution of Mobile Threats

June 30th, 2010

As mobile phones continue to evolve, they’ve become nearly as fast, powerful, and connected as personal computers. With this transformation has come drastically increased susceptibility to malware and viruses, as consumers use their internet-connected phones to download apps and access banking information.

Originating in the days of simplistic cell phones, these threats have evolved along with the devices themselves, and an independent security researcher recently traced their development in a post on the meedabyte blog.

In the article, security expert Cristofaro Mune cites online app stores–carrying thousands of smartphone applications from thousands of third-party developers–and the high-speed data capabilities of today’s 3G and Wi-Fi devices as two of the recent advancements that make today’s mobile phones increasingly vulnerable to viruses and malware.