Security within: Kaspersky Lab launches Kaspersky Security System

Kaspersky Lab announced the immediate availability of Kaspersky Security System. The new platform is launched as an embeddable OEM component to manufacturers and vendors of comprehensive IT solutions.

Kaspersky Lab announced the immediate availability of Kaspersky Security System. The new platform is launched as an embeddable OEM component to manufacturers and vendors of comprehensive IT solutions. Examples of such solutions include ERP and electronic document management systems, smart grids, the Internet of Things, or even critical infrastructure. At the global Embedded World industrial exhibition in Nuremberg, Kaspersky Lab and SYSGO showcased a security solution for safety-critical tasks which embeds the Kaspersky Security System within the real-time operating system PikeOS, targeted at safety and security critical embedded systems.

Combined with PikeOS, Kaspersky Security System ensures that performed communications comply with security policies.

For any system with increased security demand

It can be used in industrial systems to protect devices at the supervisory and control (SCADA) level, in connected Internet of Things (IoT) devices to assure their proper behavior, and in automotive systems to separate the safety-critical subsystems from infotainment components connected to the Internet, among others. Any kind of information systems with increased security requirements would make good use of Kaspersky Security System.

Not affecting real-time performance

While operating, KSS does not impact the performance of applications managing physical processes, making full use of the PikeOS hypervisor architecture. This is critically important for real-time applications. The solution provides embedded security and allows organizations to retain and reuse existing certification artifacts.

Components interact securely

Kaspersky Security System’s key features include its ability to apply access control rules according to given security policy, to classify the informational resources, and to configure the interaction of the components.

Such interaction is a common problem for information systems’ security. As a rule, their security is ensured by isolating applications or using some kind of container. On a technical level, the organization commonly has two options: 1. isolation and security without interaction, or 2. no isolation, interaction is enabled, but at the increased level of vulnerability.

Kaspersky Security System essentially adds the third option that allows isolated components to interact with each other securely.

Divide et Impera

Overall, Kaspersky Security System paradigm is based on the strict separation of security features from the functional components of the computer system. Security is provided regardless of how the system is implemented. Because of this, trusted systems can be built using distrusted components and KSS. Security rules and policies can be varied without changing any functional components.

Andrey Doukhvalov, Head of Future Technologies and Chief Strategy Architect at Kaspersky Lab says: ‘An analysis of the evolution of trends in cybercrime suggests that any information system without a trusted infosecurity module poses a threat to the security and integrity of business processes, and may potentially lead to serious consequences.’

According to Doukhvalov, Kaspersky Security System is a platform with a unique component makeup and feature set, which ensures the required level of cybersecurity for any IT system with demanding security requirements.

Designed to be integrated

Kaspersky Security System is delivered as an OEM component designed to integrate into information systems, and is suitable for use by software and hardware vendors, as well as system integrators. With Kaspersky Security System, the vendor or integrator can apply basic, default security policies, sufficient for most usage scenarios, or manually fine-tune their security configurations to meet the needs of specific systems or business tasks, since their requirements may differ formidably.

Kaspersky Security System is now available for PikeOS, Linux and KasperskyOS. The deep integration of KasperskyOS and Kaspersky Security System creates a sustainable, versatile, and high performance platform to support security in different systems, including industrial networks.

Tips