Mocana announced the release of version 5.1 of its flagship embedded device security software suite. The Linux-compatible Device Security Framework 5.1 is said to offer a variety of FIPS-certified embedded security tools, including IPSec, SSH, SSL, and crypto engines, as well as tools customized for wireless, VoIP, and power-constrained devices.

The forerunner of Mocana's Device Security Framework (DSF) was introduced in 2004, and the company added certificate management to a version released in 2007. The DSF tools offer "multi-layered integrity protection" for the "Internet of Things," which Mocana describes as comprising some 20 billion datacom, smartgrid, federal, consumer, industrial, and medical devices.

DSF is used by millions of people in products sold by over 100 companies, including Dell, Cisco, Honeywell, General Electric, General Dynamics, Avaya, Nortel Networks, Harris, and Radvision, claims the company.

DSF 5.1 is available for 30 operating systems and more than 70 CPUs, and is "platform independent, endian-neutral, and can be used without an OS or RTOS," says Mocana. Platforms are said to include Linux, MontaVista Linux, VxWorks, OSE, Nucleus, Solaris, ThreadX, Windows, MacOS X, (ARC) MQX, pSOS, and Cygwin. All versions are said to be available as government-certified FIPS 140-2 level 1 validated binaries, or in source. A developer API is also said to be available.

The company also sells DSF for Android and DSF for Freescale products, among other specialized versions, but these do not appear to be covered in the 5.1 upgrade.

Mocana DSF architecture
(Click to enlarge)

Components of DSF 5.1 are said to include:

• NanoSec -- An IPSec, IKEv1/v2 and MOBIKE tool for developers building device-based VPNs, with an integrated firewall and "robust certificate management capabilities"
  
  
• NanoSSH -- Optimized SSH solution with RADIUS support, designed for encrypting device communications over untrusted networks
  
  
• NanoSSL -- Optimized SSL client and server tool built for constrained device environments or "applications where performance is critical"
  
  
• NanoDefender -- Secure boot, trusted updating, and malware protection for power-constrained devices
  
  
• NanoWireles -- Supports wireless-specific features like WPA2, EAP supplicant, 802.11 extensions, certificate management, RADIUS, and SSL support
  
  
• NanoVOIP -- VoIP security tool that includes device-optimized SRTP, DTLS, firewalling, and certificate management
  
  
• NanoCrypto -- Device-optimized cryptographic engine with support for NSA Suite B cryptography, RSA, AES, and Elliptic Curve encryption

DSF 5.1 fits into tiny memory footprints, and offers much better performance than open source embedded security packages, claims Mocana. Both source and binary versions of the core cryptographic engines are said to include full support for NSA's Suite B algorithms, providing an alternative for government agencies and contractors when classified "Suite A" algorithms are inappropriate or unavailable, says the company. Mocana also touts DSF's lack of GPL code, which is said to secure intellectual property from accidentally becoming public domain due to "GPL contamination."

Stated Adrian Turner, President and CEO of Mocana, "We're beginning to see a lot more attacks on non-PC devices. Sophisticated attacks evolved on PCs, and they've grown a lot more virulent on the Internet. Now that malware is being re-targeted toward non-PC devices, like smartphones and medical monitors, most of these devices are pretty defenseless. A fundamentally different approach is required to protect the integrity of non-PC devices, and we think we've found it."

Availability

Developers can now receive a free evaluation copy of the new 5.1 release, says Mocana. Customers who are under a current support contract will receive the upgrade automatically, at no additional charge, says the company, which did not disclose pricing. More information may be found here.

---

Related Stories:

• Device security suite automates certificate management
• Embedded crypto library gains FIPS 140-2 certification
• Embedded SSL library gains advanced authentication
• Embedded-oriented SSL, SSH suite launches
• Embedded webserver gains small footprint SSL support
• First ever Linux botnet?

Discuss Embedded security software rev'd   Interesting stuff. I don't think anyone else can touch them as far as depth or... >>> Post your comment now!

>>> More News Articles          >>> More By Eric Brown