Product | Isis

Ideally suited for Cross-Domain, Cyber-Security, MLS/MILS, and general data security applications, the modular and flexible Isis family of Intellectual Property (IP) solutions and tools helps you design, simulate and deploy a secure Ethernet network, or a hybrid secure network that contains Ethernet elements.

Isis security is set on a per-Virtual Link (VL) basis and managed by the Isis Switches/Routers, with each VL being unidirectional. This provides maximum control when establishing the optimal network architecture to implement network security policy.

Isis does not require the use of a guard to segregate network traffic of different security classifications, although Isis can be used in conjunction with existing guards if desired. All of the required separation, routing, policing and filtering is performed by the Isis Switch / Router.

Through the Isis tools, security policy can be immediately modified by cleared staff in the case of a change in operational security requirements without the need to modify the physical hardware. This provides a level of flexibility and immediacy in dealing with the evolving threat landscape that does not exist with traditional secure network solutions.

In particular, for applications that require both security and safety, Embvue's Isis is absolutely ideal since it addresses both common criteria security requirements and DO-178B certification requirements for airborne software at the same time.

Industry Standardization
Isis is based upon the tried and tested aviation industry standard for airborne Ethernet networks.

Complete Solution for Security
The Isis product family includes a secure switch / router software implementation, a secure end system network stack and a complete set of networking tools that are provided to assist customers in designing, simulating, integrating, configuring, optimizing and monitoring the network.

Network Flexibility is Built In
Network configuration is actually the biggest headache for integrators. The Isis tools make it easy for customers to configure and re-configure entire networks automatically once the desired modifications have been made in the Isis network simulation tool. This makes secure networks much quicker and more reasonable to deploy initially, and enables quicker and more reasonable management of changes to network devices or additions to the network as they occur.

Flexibility to Manage Security Policy
Isis implements a software Partitioning Communication System (PCS) in both end systems and switches. The PCS controls the way the security policy in force is implemented in the network. The Isis tools allow access to the PCS for authorized users, providing them the ability to modify the in-use security policy as security threats or the environment change.

Platform Independence
Isis is a 100% software product. It has been architected by Embvue to provide the maximum possible separation from the underlying hardware and operating system upon which it runs (true of both end systems and switches/routers). This provides customers the flexibility to have Embvue port its products to whatever hardware/RTOS platform they chose.

More Control than Traditional Hardware Solutions
For most existing secure hardware implementations, the security level for a given switch or router port is set ahead of time and is fixed from that point on. This makes the hardware network implementations very rigid and not readily expandable. Isis controls security and routing at the virtual link level, meaning that switches and routers do not need to be configured with a single security level assigned to each physical port (physical ports can handle multiple different security levels). This provides enormous network flexibility, allows for growth and reduces the overall number of switches/routers required. This in turn reduces cabling, quantity of hardware, system weight, and system production time.

Provides Many Customer Options
Embvue is happy to discuss licensing Isis a number of different ways, depending upon customer wishes, capabilities and budget. Embvue can help customers produce their own secure products based upon Embvue technology, can integrate its technology with other COTS products that the customer chooses, or can integrate its technology with other products and deliver a complete solution. Licensing schemes for all of these options are possible.

Whatever reason you have for being interested in network security and whatever industry you are involved in, Isis is the right solution for your network security needs.

Please fill out the Product information request form to receive additional product information.