Cyber: Protection for data in motion | ADM May 2012

Allegedly, communications and computers are there to make our lives easier and for most of us, adding IT security is something that makes our lives just that little bit more complicated. However solutions from M5 Network Security are making security a little less complicated.

Until recent times, Defence liaison officers and other users requiring secure remote communications had to deploy with quite a large suitcase when in the field. This 10-15-kilogram suitcase and associated laptop computer allowed them to communicate encrypted information back to Australia via a dedicated communications link.

Now imagine a situation where said officer could plug in a small inconspicuous box between a laptop and a hotel Ethernet connection and have access to the same level of security over any public or private IP bearer. This is what M5 Network Security offers.

Through its Secure Communication System (SCS) family of products, this solution can be tailored for a single user or up to a field headquarters level, all in a user friendly way with touch screen graphic user interface. All devices are also managed through the SCS Network Management System (SCS-NMS), developed by M5, that can track operating costs and other usage data in real time, and enables remote management and configuration of devices to make use of the best communications path based on the available matrix of cost and bearer performance. With the ability to connect via ADSL, a hotel Ethernet cable, a Wi-Fi hotspot, 3G network, fibre and BGAN satellite concurrently, the units are able to jump between links, or use more than one link simultaneously to suit the business and security needs of the customer.

The SCS device range provides remote simultaneous access for multiple networks ranging from Top Secret down to Unclassified. The SCS family of products includes a single user unit, the SCS-100 which provides for two security domains and the SCS-200 for a small team of users and three security domains. The SCS-400 can cater for up to 150 directly connected users and multiple domains, depending on the number of units.

The SCS-400, which comes in a ruggedised container for harsh operating conditions but is still only three Rack Units (RU) in height, provides the communications hub for a forward operating base or headquarters. Apart from being able to connect laptops, phones etc via over the listed IP sources, it also provides a Radio Over IP (ROIP) network capability and in-built virtual servers to allow local applications to be deployed.

Even the design of the unit is aimed at time-poor users who just want a system that works when you plug it in. Ports at the back of the unit are dynamically assigned and labelled with individual OLEDS (organic light emitting diode) displaying relevant colour and symbols for ease of use.

“We estimate that the SCS-400 would replace about a truck and half worth of the old Parakeet gear,” Merik Karman, chief technology officer at M5 Network Security told ADM, “This provides substantial savings in deployments costs and minimises setup time”.

The SCS system complements Defence’s Secret or Restricted networks allowing Defence to replace expensive satellite connections with any available IP connection, anywhere in the world whether that be a hotel’s broadband service or the local WiFi hotspot. SCS products can be used in conjunction with any IP cryptography solution including the L-3 Communications TRL Technology Catapan making secure encrypted communications a much easier proposition for users. For example, an SCS-100 and Mini-Catapan can fit easily inside a suitcase or handbag, along with a laptop.

The SCS-NMS provides a military standard overwatch capability that has full permissions-based management access into each device operating the network. From this remote view, analysts or support staff can change the IP settings or access levels by ghosting the unit. The NMS is all about providing analysts a way to sift and sort information in a timely way.

At the time of writing, the SCS-100 was in production and delivery has commenced, the SCS-200 is in operation with Defence and other customers and the SCS-400 is due for delivery at the end of June. Not bad for a technology that went from a whiteboard to testing in roughly seven months.

Considering this fully Australian owned company consisting of a group of roughly 45 people nestled in their own concrete bunker in Canberra, the achievement is even more impressive. Complementing the SCS offering, M5 also provides cyber-security services to Government including the Defence Computer Incident Response Team (CIRT).

The company was not able to speak of the projects under which their technology is being delivered due to commercial in confidence reasons, but with the range of defence communications projects on the book, an educated guess can be made.

The SCS system is not replacing Defence’s Secret or Restricted networks. It’s more about providing a secure gateway that replaces expensive satellite connections with an IP connection that can be made anywhere. The SCS united used in conjunction with L-3 Communications TRL Technology Catapan encryption device make secure encrypted comms a much easier proposition for users. For example, an SCS-100 and Mini-Catapan can fit easily inside a suitcase or handbag along with a laptop.

The NMS provides a military standard overwatch capability that has full access into each unit in the system. From this remote view, analysts or support staff can change the IP settings or access levels by ghosting the unit. The NMS is all about providing analysts a way to sift and sort information in a timely way.

The system aims to narrow the funnel of an event to an alert followed by a candidate incident through to an incident investigation as much as possible. An analyst looking at the security of their networks doesn’t much mind if a user accidently heads to a site by clicking on the wrong link or spends too much time on YouTube. They do care about advanced persistent threats on their systems.

M5 has also been the successful tenderer for the Attorney-General’s Department Secure Remote Communications Standing Offer Panel within the Federal Government which provides access for all Federal and State governments to the SCS range of products. This standing offer has already been used by other departments to acquire a range of SCS equipment.