Network hacks, data breaches, information theft, and other malicious network attacks are on the rise – and so is concern for overall network security strategy. Given the potential repercussions surrounding network attacks, it is imperative that organizations deploy a proactive, defense-in-depth strategy that addresses all layers of the network.
LGS Innovations recognizes the importance of network-level software integrity as a component of the larger network security ecosystem. With a dedication to the evolution of enterprise support born from extensive experience deploying secure, mission-critical switching solutions, LGS Innovations offers CodeGuardian™: a solution that hardens network devices at both the software source code and binary executable levels to enhance overall network security.
Through partnership with Alcatel-Lucent Enterprise (ALE), a leading provider of enterprise communications solutions around the world, the LGS CodeGuardian solution has been applied to ALE’s OmniSwitch® family of products, to harden these network devices at both the software source code and binary executable levels within.
Staying Secure in an Evolving Environment
Modern day routers and switches are customized embedded computers, and the software running on them is not protected by traditional IT security mechanisms such as virus scanners. This leaves routers and switches susceptible to the introduction of malware and other attacks, potentially causing:
The LGS CodeGuardian solution mitigates larger enterprise risks at the source, enabling an enhanced security profile through:
While the telecommunications industry’s growing reliance on a global software production process has raised questions about the software chain of custody and potential vulnerabilities introduced along the chain, CodeGuardian protects networks from intrinsic vulnerabilities, code exploits, embedded malware, and potential back doors that could compromise mission-critical operations. CodeGuardian promotes a proactive, defense-in-depth approach toward network security that continuously defines and implements value-add capabilities to address both current and future threats.
A Three-Layer Approach to Software Assurance
LGS’ CodeGuardian technology hardens the OmniSwitch software through a combination of:
This three-layer approach not only ensures security, but chain of software custody control as well.
Independent Verification and Validation (IV&V) and Analysis of Source Code
CodeGuardian technology uses a proactive security approach through IV&V and operational vulnerability scanning and analysis of switch software within the network equipment portfolio, reviewing the source code for:
CodeGuardian IV&V and vulnerability analysis addresses external interfaces such as:
Software Diversification to Prevent Exploitation
CodeGuardian technology also implements software diversification to randomize the executable program address space so that various instances of the same software, while functionally identical, are arranged differently on the binary level, making any address-dependent exploits ineffective on other diversified instances of the software. This prevents attackers from:
In order to perform an exploit against a target, an attacker will typically take advantage of a vulnerability in a system, which often requires knowledge of the underlying address layout of an application. CodeGuardian’s diversification process mitigates this risk by analyzing and modifying the position of application components, thereby reducing the effectiveness of attacks based on the address layout of a standard, non-diversified version of the software.
LGS Innovations and Alcatel-Lucent Enterprise: Partnering for Best-in-Class Network Security
Alcatel-Lucent Enterprise (ALE) is committed to delivering the most secure software solutions within their switching equipment, and has integrated LGS’ CodeGuardian technology in their software development and delivery processes in order to protect against concerns at the switching level.
The Alcatel-Lucent Enterprise OmniSwitch family of products is changing the way government and commercial organizations work and communicate. Encompassing the most advanced line of switching and routing platforms that are supported by a single ALE operating system (AOS), the same feature set, and the same network management tool (OmniVista®), the OmniSwitch line meets the most stringent and mission critical networking requirements for a network’s access, distribution, and core layers.
The OmniSwitch line offers innovative capabilities, including embedded analytics, access management software integration, and Unified Access, through a converged wired and wireless management platform. The ALE Data Center Switching Infrastructure solution received a rating of “Very Strong” by industry analyst firm Current Analysis. Key strengths of the solution include:
About Alcatel-Lucent Enterprise
Our company is a leading provider of enterprise communications solutions and services, from the office to the cloud, marketed under the Alcatel-Lucent Enterprise brand. Building on our established heritage of innovation and entrepreneurial spirit, we operate globally with 2700+ employees in 100+ countries worldwide, with headquarters near Paris, France.
With communications, networking, and cloud solutions for business of all sizes, our team of technology experts, service professionals, and 2900+ partners serves more than 830,000 customers worldwide, tailoring and adapting our solutions and services to local requirements. This provides tangible business outcomes through personalized connected experiences for customers and end users.
For more information, visit our web site at: https://enterprise.alcatel-lucent.com.
For more information on the LGS Innovations CodeGuardian solution, please fill out the form below.