Posts Tagged ‘Mocana’

ClearCube Secures Centralized Computing Solutions with Mocana

Tuesday, July 13th, 2010

San Francisco, CA (PRWEB) July 14, 2010
Mocana Corporation, a company that focuses on securing networked devices, today announced that ClearCube Technology, Inc. has licensed its NanoSSH and NanoSSL technology to securely manage its centralized and virtualized computing solutions. ClearCube’s solutions allow users to integrate powerful PC blade technology, cutting edge user access devices and expert professional services to give organizations comprehensive, high performance centralized computing and virtual desktop solutions. With a growing proportion of enterprise business being done on client side devices in centralized/virtualized environments, secure management is critical.

Mocana’s NanoSSH and NanoSSL are embedded in ClearCube’s Remote Management Module (RMM) in the chassis, centralized in a remote datacenter, to secure all communication between the RMM and ClearCube’s Sentral management software suite. Sentral and the RMM provide a wide range of management functions for virtual machines, centralized PC blades, servers, chassis, and more. Mocana’s technology will help organizations leverage the power and flexibility of ClearCube’s Centralized and Virtualized solutions while securing the management channels.

NanoSSL is Mocana’s SSL/TLS solution designed to speed product development while providing best-in-class device security in resource-constrained environments like the thin clients used by ClearCube. NanoSSL is open-standards-based, extensible, platform-agnostic and includes an optional government-certified FIPS 140-2 level-1- validated crypto core. NanoSSL includes a full-featured key generator and certificate management client, and supports government Suite B crypto algorithms and the new RFC standard for TLS 1.2.

NanoSSH is Mocana’s SSH client/server solution with support for X509.v3 certificate-based authentication and comes with RADIUS client, specifically designed to speed product development while providing best-in-class device security services for resource-constrained environments. NanoSSH provides a holistic approach for securing networked devices and services, and is ideally suited for resource-constrained devices as well as high-traffic enterprise and federal environments where performance is critical. NanoSSH is open-standards-based, extensible, extremely small footprint, platform-agnostic and features an optional government-certified FIPS 140-2 level-1-validated crypto core.

Both NanoSSH and NanoSSL solutions are GPL-free, so developers can feel confident about the long-term integrity of their intellectual property. New developers can request a free trial of Mocana products at www.mocana.com. “ClearCube’s model is helping to lead the shift towards centralized and cloud computing, but with appropriate care taken for device security,” said Adrian Turner, CEO of Mocana. “The addition of heterogeneous client-side devices to this model adds another dimension to the security challenge. That’s why ClearCube is using Mocana, to make sure that today’s most flexible centralized computing architectures are safe for mission-critical users, like those in government. ”

“One of the key value propositions of our centralized and virtualized solutions is our ability to keep the management of the different components in the system simple and secure”, said Raj Mellacheruvu, Director of Engineering at ClearCube Technology. “With Mocana’s technology we are able to securely communicate with our remote management modules over the network.”

About Mocana

Mocana secures the “Internet of Things” – the 20 billion datacom, smartgrid, federal, consumer, industrial and medical devices that connect across every sector of our economy. These devices already outnumber PC’s on the Internet by five to one, representing a $900 billion market that’s growing twice as fast as the PC market. Every day, millions of people use products sold by over 100 companies that leverage Mocana’s Device Integrity software, including Dell, Cisco, Honeywell, General Electric, General Dynamics, Avaya, Harris and Radvision, among others. Mocana won Frost & Sullivan’s Technology Innovation of the Year award for 2008 for Device Security, and was named to the Red Herring Global 100 as one of the “top 100 privately-held technology companies in the world” in January 2009.

Government Certifies First Android Crypto Software with NSA Suite B

Tuesday, June 1st, 2010

Official FIPS 140-2 Validation for Mocana NanoCrypto Android Should Make it Easier for Military, Government and Contractors to Specify Android Devices

San Francisco, CA (PRWEB) June 2, 2010 — Mocana Corporation, a company that focuses on securing non-PC connected devices, today announced that it has earned the government’s first FIPS 140-2 level one validation for a binary cryptographic module with Suite B cryptography running on the Android™ platform.

Mocana was in the news last week after receiving a significant strategic investment from Symantec. The resulting technology partnership will help Symantec expand its offerings from the PC into the faster-growing “smart device” market.

The 140-2 FIPS (Federal Information Processing Standards) are used to accredit the cryptographic “engines” that drive secure software or hardware implementations, and most federal agencies and contractors working on sensitive government projects are prohibited from buying products containing security software that is not officially FIPS-validated. Up until now, FIPS-validated security hasn’t been commercially available for Android devices. Today’s announcement clears an important obstacle to the more widespread use of these devices in the federal government.

NIST, the National Institute of Standards and Technology, wrote the FIPS 140 Publication Series to standardize federal cryptography requirements. Most federal agencies and departments require that any computer security implementations contain only FIPS-certified cryptographic modules. The FIPS 140-2 program tests security software and hardware approved for government “sensitive, but un-classified” information. The application and testing process is rigorous and non-trivial, but for companies selling security products to the federal government, their contractors or allies overseas, formal FIPS validations are a prerequisite to eligibility for government contracts.

Mocana applied for and received FIPS 140-2 Level 1 validation for its NanoCrypto Android product compiled for Linux on ARM-based CPUs; the FIPS-validated NanoCrypto binary will run on all current Android phones and devices. NanoCrypto is a sophisticated cryptographic engine designed for device developers. It’s purpose-built for non-PC devices and resource-constrained embedded systems. It is one of the smallest, fastest and most comprehensive cryptographic cores on the market, in addition to being one of the most popular: the cryptographic engine that drives NanoCrypto is already installed on millions of devices from hundreds of device OEMs worldwide, on everything from networked medical devices to unmanned military drones (“UAVs”). With built-in support for over 30 operating systems, NanoCrypto enables device OEMs and ISVs to add sophisticated cryptographic security features to almost any type of device or application.

“This makes it easier for developers to start building cost-effective, security-oriented commercial Android apps for use in federal and military settings,” said Adrian Turner, CEO of Mocana. “Many government buyers couldn’t purchase Android phones ‘off the shelf’, because FIPS 140-2 validated solutions weren’t available. Now this incredibly popular platform is a more viable, cost-effective option for sensitive federal and military applications that need strong cryptography.”

FIPS certification should make it easier for Android to penetrate the medical market, too – another device ecosystem where security is key. Specifying FIPS 140-2 validated encryption software in purchasing contracts is an easy, “best practices” way for hospitals and health networks to take a high assurance approach to data confidentiality and integrity protection, especially as it relates to the security and privacy of patient records. Mocana’s CEO, Adrian Turner, was interviewed recently by Maria Bartiromo on CNBC regarding the state of medical device security, and interested parties can view that video at http://www.mocana.com/video-cnbc-040110.html.

NanoCrypto, like every Mocana product, is available as a FIPS-validated binary for specific platforms or as platform-independent ANSI C source code. Designed exclusively for developers; NanoCrypto is not a “finished app” or utility for end-users. Developers can request a free trial of the NanoCrypto product at http://mocana.com/nanocrypto.html

About Mocana
Mocana secures the “Internet of Things” – the 20 billion datacom, smartgrid, federal, consumer, industrial and medical devices that connect across every sector of our economy. These devices already outnumber PC’s on the Internet by five to one, representing a $900 billion market that’s growing twice as fast as the PC market. Every day, millions of people use products sold by over 100 companies that leverage Mocana’s Device Integrity software, including Dell, Cisco, Honeywell, General Electric, General Dynamics, Avaya, Nortel Networks, Harris and Radvision, among others. Mocana won Frost & Sullivan’s Technology Innovation of the Year award for 2008 for Device Security, and was named to the Red Herring Global 100 as one of the “top 100 privately-held technology companies in the world” in January 2009.

Symantec Makes Strategic Investment in Mocana

Wednesday, May 26th, 2010

Following closely on the heels of their purchases of PGP and VeriSign, Symantec has made a major investment in smart-device security specialist Mocana, actually leading the company’s C-round of venture financing. As part of Symantec’s new “Norton Everywhere” initiative–aimed at securing the growing world of internet-connected, non-PC devices–the resulting technology partnership will expand Symantec’s offerings into the “Internet of Things.”

More on today’s announcement:

Free Webinar: Secure Your Device with NanoSec

Thursday, April 8th, 2010

pic8-42Working on a project that requires IPSEC security for embedded systems? Mocana’s NanoSec can help you stay secure and on schedule. Attend this FREE webinar to find out how.

Medical Devices Hacked

Thursday, April 8th, 2010

The New England Journal of Medicine has published a report that finds medical implant devices, such as cardiac defibrillators and pacemakers, are vulnerable to being hacked via their internet-enabled access points. A University of Washington Security Expert has even successfully infiltrated one such device. The results could be “a matter of life and death”, as explained in this segment of CNBC’s “Closing Bell” featuring Mocana CEO Adrian Turner.

Mocana announces First Government-Certified Crypto for iPhone, iPad

Monday, April 5th, 2010

pic1-42FIPS 140-2 Validation for Mocana NanoCrypto™ Removes An Obstacle to Federal Purchases of Apple Devices “Off the Shelf”

San Francisco, CA (PRWEB) April 5, 2010 — Mocana Corporation, a company that focuses on securing non-PC connected devices, today announced that it has earned the government’s first FIPS 140-2 level one validation for an encryption product running on the Apple iPhone or iPad.

The 140-2 FIPS (Federal Information Processing Standards) are used to accredit the cryptographic “engines” that drive secure software or hardware implementations, and most federal agencies and contractors working on sensitive government projects are prohibited from buying products containing security software that is not officially FIPS-validated. Up until now, FIPS-validated security hasn’t been commercially available for iPhone, iPod Touch or iPad devices. Today’s announcement clears an important obstacle to the more widespread use of these devices in the federal government.

NIST, the National Institute of Standards and Technology, wrote the FIPS 140 Publication Series to standardize federal cryptography requirements. Most federal agencies and departments require that any computer security implementations contain only FIPS-certified cryptographic modules. The FIPS 140-2 program tests security software and hardware approved for government “sensitive, but un-classified” information. The application and testing process is rigorous and non-trivial, but for companies selling security products to the federal government, their contractors or allies overseas, formal FIPS validations are a prerequisite to eligibility for government contracts.

Mocana applied for and received FIPS 140-2 Level 1 validation for its NanoCrypto product compiled for iPhone OS on ARM-based CPUs; the FIPS-validated NanoCrypto binary will run on all current iPhone, iPad and iPod touch models. NanoCrypto is a sophisticated cryptographic engine designed for device developers. It’s purpose-built for non-PC devices and resource-constrained embedded systems. It is one of the smallest, fastest and most comprehensive cryptographic cores on the market, in addition to being one of the most popular: the cryptographic engine that drives NanoCrypto is already installed on millions of devices from hundreds of device OEMs worldwide, on everything from wireless networked medical devices to unmanned military drones. With built-in support for over 30 operating systems, NanoCrypto enables device OEMs and ISVs to add sophisticated cryptographic security features to almost any type of device or application.

“This opens the door for developers to start building cost-effective, security-oriented commercial iPhone and iPad apps for use in federal and even military settings,” said Adrian Turner, CEO of Mocana. “Many government buyers couldn’t purchase iPhones ‘off the shelf’ for environments where encryption or authentication was required, because FIPS 140-2 validated “apps” simply weren’t available. Now these revolutionary platforms – including the new iPad – are more viable, cost-effective options for sensitive federal and military applications.”

FIPS certification should make it easier for iPhones and iPads to penetrate the medical market, too – another device ecosystem where security is key. Specifying FIPS 140-2 validated encryption software in purchasing contracts is an easy, “best practices” way for hospitals and health networks to take a high assurance approach to data confidentiality and integrity protection, especially as it relates to the security and privacy of patient records. Mocana’s CEO, Adrian Turner, was interviewed recently by Maria Bartiromo on CNBC regarding the state of medical device security, and interested parties can view that video here.

NanoCrypto, like every Mocana product, is available as a FIPS-validated binary for specific platforms or as platform-independent ANSI C source code. NanoCrypto is not a “finished app” for end-users. It’s designed exclusively for developers using Apple’s Objective-C™, a reflective, object-oriented programming language which underpins the iPhone OS that drives the iPhone, the iPad and the iPod touch. Developers can request a free trial of the NanoCrypto product here.


About Mocana

Mocana secures the “Internet of Things” – the 20 billion datacom, smartgrid, federal, consumer, industrial and medical devices that connect across every sector of our economy. These devices already outnumber PC’s on the Internet by five to one, representing a $900 billion market that’s growing twice as fast as the PC market. Every day, millions of people use products sold by over 100 companies that leverage Mocana’s Device Integrity software, including Dell, Cisco, Honeywell, General Electric, General Dynamics, Avaya, Nortel Networks, Harris and Radvision, among others. Mocana won Frost & Sullivan’s Technology Innovation of the Year award for 2008 for Device Security, and was named to the Red Herring Global 100 as one of the “top 100 privately-held technology companies in the world” in January 2009.

Security Industry Experts Warn of Enterprise IT Weaknesses

Monday, April 5th, 2010

pic2-42Mocana CEO Adrian Turner recently joined a group of security industry leaders for an in-depth discussion of the latest threats to enterprise security and the best strategies available to business IT for addressing these threats and preventing future catastrophe.

As reported on Datamation, the Churchill Club panel emphasized a number of key areas where enterprise IT faces significant security challenges. Mocana CEO Adrian Turner described the transition to cloud computing and the continued “consumerization” of the enterprise–exemplified by the increased presence of consumer devices such as iPhones and the use of social media like Twitter in the corporate setting–as the two most significant new threats to enterprise security.

According to Adrian Turner, “Companies need to get ahead of the curve by setting policies for what devices can be used and how.” He also pointed out that today’s sophisticated networked printers are, in fact, computers themselves and are too often overlooked as easy gateways to the enterprise network for malware.

And it is malware that, according to these security experts, continues to pose some of the most serious threats to the ongoing security of the enterprise network. According to Ken Silva, CTO of VeriSign, “Malware is slipping through our most protected systems and we can’t even see the threat coming.”

Another expert noted, “The acceleration of malware is phenomenal. There’s a new threat created every second…Even companies with hundreds of people working on security are challenged because these are criminal organizations writing these [malware] programs and they’re good at it.”

Mocana Releases Spring 2010 Device Integrity Report

Monday, March 22nd, 2010

pic6-40Mocana is pleased to announce the release of our Spring, 2010 Device Integrity Report, (PDF) “U.S. Unprepared for Internet Device Flood: Unaddressed Security Problems & Talent Drought Threaten Long-Term Commercial, Government Interests”.

Mocana Presenting at 2010 RSA Conference

Sunday, February 28th, 2010

pic4-31Mocana is pleased to announce our participation in the 2010 RSA Conference, taking place in San Francisco, March 1-5, 2010.

As part of the “Governance, Risk & Compliance” track on March 3, 2010, we will present “Recent Attacks on Medical Devices”:

A new generation of connected medical devices is dramatically lowering healthcare costs. But many of these devices, including popular pacemakers, insulin pumps, and remote patient monitoring systems, have been fielded without adequate security. We detail newly discovered attacks and vulnerabilities on these devices, and suggest possible solutions.

To register, click here or visit www.rsaconference.com.

Mocana Wins Contract to Secure UAV Drones with Spark

Monday, February 22nd, 2010

pic1-29Spark Integration Technologies, a leading provider of software for resolving the complexities in real-time communication between distributed, heterogeneous technologies, today announced a technology partnership with Mocana to secure Spark’s Distrix™ information exchange product suite.

San Francisco, CA (PRWEB) February 17, 2010 — Spark Integration Technologies, a leading provider of software for resolving the complexities in real-time communication between distributed, heterogeneous technologies, today announced a technology partnership with Mocana to secure Spark’s Distrix™ information exchange product suite.

The agreement allows Spark to integrate Distrix with Mocana’s NanoDTLS™ device integrity API to prevent eavesdropping, tampering and message forgery of satellite communications managed by Distrix. Distrix enables customers to swiftly integrate Mocana’s encryption and authentication technology without requiring any rework to existing systems. This joint solution is already being used by Cahon Systems based in El Cajon, CA to retrofit large unmanned aerial vehicles and other assets in-the-field to secure voice and data communications between UAVs and ground stations in real-time operational scenarios.

Spark’s Distrix System Builder™ simplifies the design, coding, and implementation of distributed information exchange by providing graphical tools to describe the information and processes within systems and generate the code to link them together in the required configuration. By isolating the application logic from the environmental implementation, System Builder enables developers to change operational details such as the deployment platform and Quality of Service parameters without impacting application and interface logic.

Underlying System Builder is Spark’s award-winning Distrix Core Services platform that enables the integration of disparate hardware and software components and manages the addition, removal, modification, fail over and information exchange between them. Distrix enables a fundamental shift in systems architecture, design, and engineering with massive time and cost savings over traditional systems integration approaches and technologies.

NanoDTLS is Mocana’s super fast, super small DTLS solution specifically designed to speed product development while providing best-in-class device security services for resource-constrained environments. The Datagram Transport Layer Security (DTLS) protocol provides communications privacy for datagram protocols. NanoDTLS is based on the stream-oriented TLS protocol, and allows datagram-based applications to prevent eavesdropping, tampering, or message forgery. The datagram semantics of the underlying transport are preserved by NanoDTLS, and applications built with it don’t suffer from the delays associated with stream protocols. NanoDTLS is open-standards based, extensible, extremely small footprint, platform-agnostic and includes an optional government-certified FIPS 140-2 level one-validated crypto core, and supports the NSA’s Suite B cryptography suite. Interested developers can request a free source code evaluation of NanoDTLS at http://www.mocana.com/nanodtls.html

“Our project specifications required an embedded solution that provided robust cryptographic coprocessor support on an ARM9 processor. We found that NanoDTLS exceeded the performance and platform requirements while being extremely easy to use,” said Chad Trytten, CEO of Spark. “The fact that we were dealing with Mocana – the recognized experts in device integrity – helped convince our customer that NanoDTLS was the best approach. In working with them, we were also tremendously impressed by Mocana’s quick and comprehensive support.”

“We were very excited to get the chance to work with such a creative and technically innovative firm like Spark,” said Adrian Turner, CEO of Mocana. “Spark works with firms building communications and unmanned systems where requirements include complicated intra-system links, inter-system communication, including collaboration between different systems and remote control of sensors, and the integration of multiple central control and data processing systems into powerful ’systems of systems’ to serve complex mission requirements.”

For more information about Distrix visit www.sparkintegration.com or call +1-604-736-6675. For more information about Mocana’s NanoDTLS, visit www.mocana.com/nanodtls.html or call +1-415-617-0055.

About Spark
Spark Integration Technologies provides award-winning system software, development tools and technologies for developers and integrators of electronic systems. Combined with straightforward development and system management tools, the secure, platform-independent information exchange software substantially simplifies the development, integration and deployment of complex, dynamic electronic systems. This has allowed Spark customers, ranging from the US Department of Defense to manufacturers of electronic products, to rapidly create and enhance capabilities in areas of cutting edge technology such as unmanned systems and communications. Visit Spark on the web at http://www.sparkintegration.com.

About Mocana
Mocana secures the “Internet of Things” – the 20 billion datacom, smartgrid, federal, consumer, industrial and medical devices that connect across every sector of our economy. These devices already outnumber PC’s on the Internet by five to one, representing a $900 billion market that’s growing twice as fast as the PC market. Every day, millions of people use products sold by over 100 companies that leverage Mocana’s Device Integrity software, including Dell, Cisco, Honeywell, General Electric, General Dynamics, Avaya, Nortel Networks, Harris and Radvision, among others. Mocana won Frost & Sullivan’s Technology Innovation of the Year award for 2008 for Device Security, and was named to the Red Herring Global 100 as one of the “top 100 privately-held technology companies in the world” in January 2009.

Media contact:
Gregory P. Funaro
Acount Representative
Lois Paul & Partners
781-782-5896
Greg_Funaro@lpp.com