Data 61 unveils ultra secure platform

CDCC solves the problem of securing information and access across multiple and segregated networks.

DST Group and Data61 CDDC team at the iAwards. Source: Supplied

CSIRO’s Data 61 and Defence Science and Technology Group (DSTG) have jointly developed a new secure platform that solves the problem of securing information and access across multiple and segregated networks.

Security and access are long running issues for government and defence agencies and the new product, dubbed the Cross-Domain Desktop Compositor (CDDC), gives users access to multiple computer networks through a single interface.

Currently, government and defence staff use multiple segregated computer networks to maintain and protect classified data. The work is further complicated by staff needing to access multiple networks concurrently to view and transfer data between systems.

While there are other solutions available to professor Gernot Heiser, chief research scientist in the trustworthy systems group at CSIRO’s Data 61, said that they often require a trade-off between security and usability.

“Software is inherently vulnerable and with the increasing rate of cyber security incidents and breaches, organisations try to solve some of these challenges by creating isolated networks or over-classifying information,” Professor Heiser said.

“In some cases the technology deployed is inherently vulnerable and if some security is enforced, there is greater friction for users.”

Accessing multiple networks across different classifications, such as unclassified, restricted and secret, usually requires staff to gain access through separate screens, mice and keyboards, or multiplexed one at a time through a mechanical switch, called a keyboard-video- mouse (KVM) switch.

According to Professor Heiser, the CDDC is a plug-and- play replacement for a KVM switch.

“It also provides controlled cut-and- paste facility between classifications, and supports highly integrated views, such as converged mail browsers and wikis, which improves situational awareness and security.

The CDDC uses hardware developed by Defence Science and Technology Group (DSTG) to give the user a picture of the operating security environment, whether it’s unclassified or protected. Meanwhile, software developed by Data 61 supports the integration and guarantees that security policies are adequately enforcement across each connected network.

The software is based on Data 61’s seL4 operating system, which is also used in autonomous helicopters and trucks and Professor Heiser said the seL4 and its use in the CDDC is the outcome of world-leading research.

“We have developed mathematical proof that seL4 is free of the faults that allow attackers to compromise commercial and even military systems. In the CDDC we are using seL4 to support an integrated view of information, including controlled cut-and-paste between domains.”

While defence is the first focus market for the CDDC, it has broad applications across government and enterprise, as well critical infrastructure, banking, health and autonomous systems.

DST researcher, Mark Beaumont said, “In an age where security is at a premium, a new approach to cyber security is needed. The CDDC platform is an example of how we can fundamentally change the way real-world systems are built and engineered.”

The Australian Department of Defence has successfully trialled the system and now Data 61 plans to market the CDDC.

Professor Heiser added that a number of CDDC units had been evaluated by the US, UK and Canada for security and usability and a productised version is highly likely to be rolled out across Australian Defence and Government users, and is likely to be exported to 5-Eyes (an international intelligence alliance) from there.

Adrian Turner, CEO of CSIRO’s Data 61 said the CDDC is another great example of Australian research and collaboration at its best.

“We have developed a road map to commercialise this product with the defence market and support from the Defence Innovation Hub,” he said.

“We will also enable a local supply chain to develop the platform for further global applications.”