Security – Valcri https://valcri.org VALCRI is a European Union project Wed, 01 Mar 2017 15:32:41 +0000 en-US hourly 1 https://wordpress.org/?v=5.2.2 OpenPMF 4.0 – patented technology from partner Object Security and VALCRI launched at RSA 2017 https://euprojectvalcri.org/news/openpmf-4-0-patented-technology-from-partner-object-security-and-valcri-launched-at-rsa-2017/ Wed, 01 Mar 2017 15:05:31 +0000 https://euprojectvalcri.org/?p=1583 ...]]>  

The launch of our new OpenPMF 4.0 Security Policy Automation Platform during RSA 2017 was a great success

The new OpenPMF 4.0 release was very well received by the press, by new and existing clients, partners and the ecosystem.

  • “One of the best launch events at RSA 2017. A real proven product without the hype and snake oil you see too often. OpenPMF Security Policy Automation is here to stay.” – John Mullen, CEO, Promia, Inc.
  • “OpenPMF 4.0 is in a league by itself, including the only security policy automation platform with natural language policies… “ – Mike Davis, CISO,ABS & Cyber Evangelist
  • “OpenPMF 4.0 provides comprehensive security policy management. RTI is looking forward to partner with ObjectSecurity to secure DDS-based systems.“ – Stan Schneider, CEO, RTI, Inc.

Everyone at ObjectSecurity would like to thank you for your support during the OpenPMF 4.0 launch events!

What is next?
This new release launch was just the start. We will continue to move cybersecurity forward by helping new clients worldwide with implementing their technical security policies – and by supporting and educating the global market with security automation events like webinars, technical and industry information and great products like OpenPMF and OpenPMF Security Policy Auditor.

Security Policy Automation 360
One of the first events you can sign up for is our very well-received Security Policy Automation 360 webinar series. Our webinars will help you to understand the benefits and advantages of security automation and in particular security policy automation. This one hour webinar is free and is a “must attend” for CISO’s, CIO’s and security managers and directors.

Sign-Up Today
To find out more and to sign-up for the Security Policy Automation 360 webinars go here.

The ObjectSecurity team wants to thank you again for your support during the OpenPMF 4.0 launch events. To experience virtually what happened during the launch, go to the OpenPMF 4.0 Launch Events Recap pages here.

Thanks, and please let me know if you have any questions.

With regards,
Ulrich

Ulrich Lang
CEO/Founder
ObjectSecurity LLC

]]> White Paper WP-2017-001: Architecture, Development and Testing Environment for a Visual Analytics-based Criminal Intelligence Analysis System https://euprojectvalcri.org/publications/white-paper-architecture-development-and-testing-environment-for-a-visual-analytics-based-criminal-intelligence-analysis-system/ Sun, 08 Jan 2017 08:58:28 +0000 https://euprojectvalcri.org/?p=1547 ...]]> The VALCRI architecture is built from different Docker containers that speak with each other using mostly REST interfaces. The architecture is designed to incorporating Security, Ethics, Privacy and Legal (SEPL) solutions. The data stores – the Unstructured Database (UDB) and the Structured database (SDB) – used are controlled by SEPL Enforcement components and a Template Engine manages the previously checked and accepted query templates that can be sent to the data stores. The Advanced User Interface (AUI) server is also designed with SEPL in mind: a Jetty (Java HTTP server and Java Servlet container) instance is created per user by a Jetty Lifecycle Management component. Each such instance lives inside a Docker container to promote isolation. The Jetty instance hosts the mid-tier services, serves the front-end JavaScript code and manages the communication between the mid-tier services and the front-end. The midtier services are written in java and front-end components are implemented using GWT – Google Web Toolkit. The Model View Presenter (MVP) design pattern is implemented. The SEPL Enforcement components, as well as the analysis components, and the Jetty Containers communicate to the CAS (Central Authentication Service) component to ensure that only authorized users can perform certain actions and allows data to be properly restricted. The user management of the CAS component is linked with the LDAP (Lightweight Directory Access Protocol) component to manage and authenticate user credentials. All the components may use the interface exposed by the GrayLog component, ensuring that any action done by any component can be logged in the logging storage. Systematic system integration is a key principle for the success of VALCRI and for that a development pipeline was designed. This pipeline aims to provide continuous system integration while promoting collaboration, contributions, quick feedback to contributions, changing and evolving interfaces, and above all respecting the principle of “keep it working” – allowing to introduce many contributions in small steps while the system continues to compile and work. The GIT Source Control Management (SCM) platform is used for keeping track of changes in the source code. It is accompanied by a GitLab installation that provides a user interface that allows managing the user accounts and the individual code repositories. In order to compile and build the code available from the SCM, a custom build system was developed using Gradle. The Gradle setup is also accompanied with a Nexus component – an artefact repository – which hosts all the compiled, binary VALCRI system components. For each change in the SCM, the source code is automatically rebuilt and all tests are run. In order to do this, a Jenkins installation was put into place. Because the VALCRI architecture includes many services working on different environments, Docker was selected to allow building, shipping and running the complete environments.

Keywords

Visual Analytics, Sense-Making, Criminal Intelligence Analysis, Architecture, REST, Security, Ethics, Privacy and Legal (SEPL), Model View Presenter, Isolation, Google Web Toolkit (GWT), Errai, Docker containers, Central Authentication Service (CAS), LDAP, GrayLog, GIT, Gradle, Nexus, Jenkins

VALCRI WHITE PAPER SERIES

VALCRI-WP-2017-001 Architecture

]]>