Free Newsletter
Register for our Free Newsletters
Newsletter
Zones
Access Control
LeftNav
Alarms
LeftNav
Biometrics
LeftNav
Detection
LeftNav
Deutsche Zone (German Zone)
LeftNav
Education, Training and Professional Services
LeftNav
Government Programmes
LeftNav
Guarding, Equipment and Enforcement
LeftNav
Industrial Computing Security
LeftNav
IT Security
LeftNav
Physical Security
LeftNav
Surveillance
LeftNav
View All
Other Carouselweb publications
Carousel Web
Defense File
New Materials
Pro Health Zone
Pro Manufacturing Zone
Pro Security Zone
Web Lec
 
ProSecurityZone Sponsor
 
ProSecurityZone Sponsor
 
ProSecurityZone Sponsor
 
ProSecurityZone Sponsor
 
ProSecurityZone Sponsor
 
ProSecurityZone Sponsor
 
 
News

LynuxWorks claims dismissed by Cyber Secure Institute

Cyber Secure Institute : 18 December, 2008  (Technical Article)
In attempt to prevent misleading claims by security software vendor, the Cyber Secure Institute issues statement on LynxSecure software from LynuxWorks
Rob Housman, the Executive Director of the Cyber Secure Institute, has put out a statement concerning the November 18, 2008 announcement by LynuxWorks of its LynxSecure software:.

LynuxWorks's said that its LynxSecure "Technology Supports EAL-7 Evaluation, Integrates Multiple Applications at Different Security Levels on a Single Piece of Silicon and Consolidates Hardware for Security and Separation…". The company also said, "LynxSecure supports a lightweight Application Run-Time environment that can be used for creating secure applications without an intervening OS which can be evaluated to the required assurance level up to EAL-7."

Sadly, like so many other security claims, this is marketing speak. Claims like this are why the Cyber Secure Institute was founded—to cut through inaccurate and misleading security claims and advocate for certified secure technologies.

Read the release carefully. LynuxWorks didn't say its technology has been certified to a high level of security. In fact, LynxSecure is not listed as certified on the National Information Assurance Partnership (NIAP) list nor is it on the NIAP's product evaluation list.

What LynuxWorks actually said is its system supports EAL 7 evaluation or could be evaluated at that level. To paraphrase, "We haven't been, but trust us, we could be evaluated to that level." Saying one could be evaluated at a level 7 isn't the same as being certified.

The Cyber Secure Institute's position is that claims about cyber security ought to be subject to an actual independent, objective, data-driven certification process.
To this end, we would encourage LynuxWorks, and any other technology provider who thinks that their systems can pass a high-level security certification, to actually go and get certified. If you get certified we look forward to inviting you to become a Certified Member of the Institute.
Bookmark and Share
 
Home I Editor's Blog I News by Zone I News by Date I News by Category I Special Reports I Directory I Events I Advertise I Submit Your News I About Us I Guides
 
   © 2012 ProSecurityZone.com
Netgains Logo