Own certified protection tools

NVP «Plasmotekhnika» is not only a full-cycle systems integrator in the field of restricted-information protection but also a developer and manufacturer of its own technical information security (TPI) tools. The line of in-house products covers secure automated workstations with passive and active protection and a data diode for one-way data exchange between networks. All products have passed state examination and hold State Service of Special Communications expert conclusions.

In-house development and manufacturing: why it matters

In the information-protection market, most companies supply and configure equipment from third-party manufacturers. In-house development is a different level of engineering responsibility: for a product to pass state examination, the manufacturer must thoroughly understand the physics of information-leakage channels, circuit design, shielding methods and the requirements of the TPI system’s regulatory documents. These same competencies work in our integration projects too — from audit and design to certification and instrumental control (more in the technical information security area).

When protection against leakage via technical channels is mandatory

Protection of information against leakage via technical channels is provided in a system where it processes information constituting a state secret, or where the corresponding decision on the need for such protection has been taken by the information holder.
Resolution No. 373 of the Cabinet of Ministers of Ukraine of 29.03.2006 «On approval of the Rules for ensuring the protection of information in information, electronic communication and information and communication systems»

This rule is mandatory both for state enterprises and institutions and for all bodies under non-state ownership. That is why the «Plasmotekhnika» line of in-house TPI tools is intended both for the public sector and for private companies that process restricted information.

What a secure workstation is and why passive or active protection is needed

A secure automated workstation (a workstation in protected design, ZARM) is a computer in which, in addition to its primary purpose, information-protection functions against specific threats are implemented: against leakage via compromising electromagnetic emanations and induced signals, leakage via power-supply and earthing networks, acousto-electric conversions, and interception via high-frequency imposition and/or irradiation. Ordinary office equipment, while operating, produces compromising electromagnetic emanations and induced signals from which information can be recovered by technical intelligence tools — even without physical access to the computer. These leakage channels can be eliminated in one of two ways.

• Passive protection: shielding, filtering and structural modification of components reduce the level of informative emanations to safe values. This approach is implemented in the PLASMA-ZV-ARM/MONO product: the structural design of the ZARM provides protection against leakage via compromising electromagnetic emanations and induced signals, power-supply and earthing networks, acousto-electric conversions, and interception via high-frequency imposition and/or irradiation.
• Active protection: a dedicated generator creates noise interference that masks the informative emanations. This approach is implemented in the PLASMA-ZARM/AZ product.

The choice between passive and active protection depends on the category of the site, the equipment placement conditions and the survey results. Our specialists will help determine the optimal option for a specific workstation.

PLASMA DD OSG (data diode): one-way operation at the physical level

The One-Way Security Gateway (OSG) PLASMA DD, or Data Diode, is a hardware and software complex for exchanging data between networks of different protection levels. Unlike a firewall, which restricts traffic by software rules, a data diode guarantees one-way transfer in hardware: the return channel is physically absent, so it cannot be opened by a configuration error or an attack. A typical application is transferring data from a lower-protection network to an isolated protected network without the risk of leakage in the reverse direction.

State Service of Special Communications expert conclusions

Each product in the line holds a valid State Service of Special Communications expert conclusion following state examination in the field of TPI (conclusion numbers — [TBC]). This makes it possible to use the products as part of comprehensive information protection systems (CIPS), as well as in information and communication systems undergoing security authorization under Resolution No. 712 of the Cabinet of Ministers of Ukraine.

Who the in-house products are intended for

Secure workstations and data diodes are in demand where processing restricted information is a daily task and protection requirements are set by regulation:

• government bodies and institutions that work with restricted information;
• restricted-access facilities and defence-sector enterprises;
• organisations that need controlled one-way data exchange between networks of different protection levels.

Below are the product cards with detailed descriptions. To select a configuration for your site, obtain documentation or clarify the details of the expert conclusions, send a request or call +38 (044) 204-83-62.