Subscribe

Secure KVM technology for desktops

Companies can minimise security threats by ensuring data integrity between user desktops accessing secure, and unsecure, networks.


Johannesburg, 08 Apr 2013

Since the advent of the Internet, "cyber attacks" have grown in prominence as a mainstay in the vocabulary of information security experts all over the world. Beyond security professionals, as well as the IT market, mainstream consumers of all technical skill levels are also dealing with cyber attacks, given the influx of viruses, identity theft, and other online transactions associated with the Internet.

Cyber attacks are constantly monitored and guarded by world governments, armed forces, and specific corporate market segments, such as financial services where data security is paramount. Without question, the presence of domestic or foreign terrorists attempting to breach national infrastructure platforms such as utility grids, major stock exchanges or other high-level targets is still prevalent. Additionally, there is an emergence and focus toward softer targets, many which are aimed at the private sector.

"The proliferation of the Internet into nearly every facet of our daily lives has enabled terrorists and other criminals to harness an all-encompassing medium for cyber attacks," says Darrian Bhana of Falcon Electronics, leading suppliers of data centre equipment and power management; communication solutions; and network infrastructure.

"From online gaming, media sharing and banking to companies relying on it to power their IT infrastructure, the Internet has evolved into the most powerful communications platform in the world," adds Bhana.

Secure KVM switches to the rescue

As security threats continue to rise at an alarming rate, so too does the need for security-hardened IT environments. Enter Secure KVM solutions by Falcon Electronics. Secure KVM switches are designed specifically for environments where security is business-critical, such as financial services and medical/healthcare.

Security-hardened KVM switches provide the means to consolidate multiple workstations of various security classification levels with one keyboard, video monitor and mouse (KVM) console. With hardware and software-based security features built into the units, installations can rest assured their data is being protected on both physical and digital levels.

Solution - ATEN's secure KVM switches

ATEN's CS1182 and CS1184 are two- and four-port USB DVI Dual-Link secure KVM switches that provide safe switching between computers operating on different secure networks. By combining physical security with controlled USB connectivity, the CS1182/CS1184 gives users the means to consolidate multiple workstations of various security classification levels with one keyboard, monitor and mouse (KVM) console.

The CS1182/CS1184 Secure KVM switches, housed in a rugged metal enclosure, ensure data integrity when switching between computers operating on different secure networks.

The secure desktop KVM switches provide users with hardware security features such as tamper-evident tape, providing a visual indication of any attempted access to the switch's internal components, and chassis intrusion detection, which disables the unit if only one of the screws is removed. In accordance with the NIAP requirements, all integrated circuits are soldered directly onto the circuit board to prevent component tampering.

From a firmware point of view, secure KVMs offer restricted USB connectivity whereby non-HID devices are ignored if connected. Isolated channel per port and automatic keyboard buffer clearing prevent any cross-computer communication. Additionally, non-reprogrammable ROM fully protects the unit's firmware from tampering and reprogramming.

Security benefits of ATEN secure KVM switches

* Chassis intrusion detection - renders the secure KVM switch inoperable when malicious tampering is detected.
* Tamper-proof hardware - all integrated circuits are soldered directly to the circuit board to prevent tampering with the components.
* Tamper-evident tape - monitors any attempt to physically access the switch's internal components.
* Non-reprogrammable ROM - prevents reprogramming the switch's firmware.
* Restricted USB connectivity - non-HIDs (Human Interface Devices) are ignored when switching.
* Port selection via pushbutton only - selecting ports via OSD and hotkey methods are disabled to enhance security.
* Cleared keyboard buffer - switch's keyboard data is automatically deleted after it has been transmitted.
* Channel isolation - isolated channel per port makes it impossible for data to be transferred between secure and unsecure computers.

While security has markedly improved in installations, cyber threats continue to be prevalent. Key concerns include securing sensitive information, network breaches, malware attacks and cyber terrorism.

"With secure KVM switches deployed, companies can minimise security threats by ensuring data integrity between user desktops accessing secure and unsecure networks," concludes Bhana. "With security features such as tamper-evident tape, chassis intrusion detection, and tamper-proof hardware coupled with software security, the ATEN secure KVM switches are well-equipped to mitigate the vulnerability of a variety of cyber attacks."

For more information on ATEN's Secure KVM Solution, contact Falcon Electronics on (011) 630 1000 or mail info@fe.co.za.

Editorial contacts

Kerry Hodgkinson
Falcon Electronics
kerry@mantubacom.co.za