Ελληνικά Login Register

Security

Ownership and Control
Redundancy and Failure recovery
  1. Trainers and users have the option to replicate the entire desktop in real time via the 'remote replica' feature.
  2. When experimenting, users can enable automatic snapshots of the desktop. In the event of a crash, the system is capable of restoring the last known working version.
  3. Servers are hosted in redundant data centers. If one data center fails, another is available at a low-latency distance to ensure continuity.
  4. The DaDesktop infrastructure utilizes data centers located globally, all governed by comprehensive physical and IT security policies.
  5. DaDesktop leverages QEMU/KVM to create and run virtual machines, both of which are integral components of the Linux operating system. This integration simplifies and accelerates the deployment of security updates by eliminating reliance on third parties. QEMU/KVM boasts an excellent track record for security and performance, surpassing many commercial solutions.
At NobleProg, a zero-trust policy is implemented
  1. Access to NobleProg and DaDesktop systems is restricted to NP Tech staff users with pre-registered IP addresses. IP tables firewall rules are employed to secure SSH and other ports.
  2. Each system is secured by Two Factor Authentication and passwords. Consequently, an attacker who obtains only the password cannot gain access, as their IP address would not be whitelisted and they would lack the One Time Password.
  3. In DaDesktop courses, each desktop network is isolated from other desktops and from public access.
  4. All NobleProg staff members use MFA systems to log in to NobleProg or DaDesktop systems. Access is revoked immediately upon staff departure to prevent unauthorized access.
Linux Hardening
  1. The DaDesktop server (node) systems are minimized by installing only necessary packages on a custom, stripped-down version of Ubuntu that we build and operate. This approach reduces complexity and overhead, resulting in fewer security vulnerabilities due to a smaller service footprint. The typical installed base for each DaDesktop server node is only 250MB.
  2. Access to the 'root' account is disabled via SSH.
  3. The DaDesktop infrastructure is based on the latest stable version of Ubuntu Linux, with automatic upgrades and patching to mitigate the risk of zero-day vulnerabilities.
  4. Servers are continuously monitored for known vulnerabilities.
  5. Unused packages and files are removed to enhance security.
  6. NobleProg has access to all source code used in the project. In the event that a vulnerability is discovered without an available patch, the NobleProg security team can implement a fix immediately.
  7. Systems are automatically updated through unattended-upgrades.
  8. All connections from our servers to the dark web are monitored and can be automatically blocked.
Monitoring
  1. NobleProg monitors all servers, including DaDesktop servers, generating alerts for any issues requiring attention. These alerts are followed up and resolved. Regular reviews of alerts and issues are conducted to ensure comprehensive resolution and prevention of recurrence.
  2. All DaDesktop servers and trainer/participant machines are monitored for CPU, memory, and network activity. Additionally, all DaDesktop nodes and the underlying system are scanned for CVEs, which trigger flags in the monitoring system for review. While security updates are typically applied automatically, any exceptions identified are patched manually or addressed through other mitigating measures.
  3. Recordings are automatically captured of Fresh Start machines during courses, aiding Trainers in checking for issues during course preparation. Optional recordings of the Trainer machine and Training Room can be made during sessions. This feature is fully controllable via the UI and can be disabled if not required.
  4. DaDesktop Operating System Templates are typically updated every couple of weeks to include the latest security updates.