Magyar Login Register

Security

Ownership and Control
Redundancy and Failure recovery
  1. Trainers and users have the option to replicate the entire desktop in real time using the 'remote replica' feature.
  2. During experimental tasks, automatic snapshots can be enabled. This allows the system to restore the last working version in the event of a crash.
  3. Our servers are hosted in redundant data centres; if one facility fails, a backup data centre located nearby with low latency is immediately available.
  4. The DaDesktop infrastructure utilizes a global network of data centres, all governed by comprehensive physical and IT security policies.
  5. DaDesktop employs QEMU/KVM to create and execute virtual machines. Since both are native components of the Linux operating system, security updates can be deployed quickly and efficiently without relying on third-party dependencies. QEMU/KVM boasts an outstanding record in both security and performance, often surpassing commercial alternatives.
At NobleProg, a zero-trust policy is implemented
  1. Access to NobleProg and DaDesktop systems is restricted to NP Tech staff members with pre-registered IP addresses. IP tables firewall rules are enforced to block SSH and other unauthorized port access.
  2. Every system is secured with Two Factor Authentication and passwords. Consequently, an attacker who only possesses a password cannot gain access, as their IP would not be whitelisted and they would lack the required One Time Password.
  3. In DaDesktop courses, each desktop network is isolated from other desktops and public access to ensure privacy and security.
  4. All NobleProg staff use MFA to log in to NobleProg or DaDesktop systems. Access rights are revoked immediately upon an employee's departure to prevent unauthorized access.
Linux Hardening
  1. The DaDesktop server (node) system is optimized by installing only essential packages on a custom, stripped-down version of Ubuntu that we build and operate. This minimizes complexity and overhead, resulting in fewer active services and reduced security vulnerabilities. Typically, the installed base for each DaDesktop server node is only 250MB.
  2. SSH access to the 'root' account is disabled to enhance security.
  3. The DaDesktop infrastructure is based on the latest stable version of Ubuntu Linux, which undergoes automatic upgrades and patching to mitigate the risk of zero-day vulnerabilities.
  4. Servers are continuously monitored for known vulnerabilities.
  5. Unused packages and files are regularly removed to maintain system efficiency.
  6. NobleProg has full access to all project source code. Should a vulnerability be identified without an available patch, our security team can develop and apply a fix immediately.
  7. Systems are kept up to date automatically through unattended-upgrades.
  8. All connections from our servers to dark-web entities are monitored and can be automatically blocked.
Monitoring
  1. NobleProg monitors all servers, including DaDesktop instances, generating alerts for any issues requiring attention. These alerts are followed up and resolved. Regular reviews of alerts and issues are conducted to ensure comprehensive resolution and prevent recurrence.
  2. We monitor CPU, memory, and network activity on all DaDesktop servers and trainer/participant machines. Additionally, all DaDesktop nodes and the underlying system are scanned for CVEs, which flag items in the monitoring system for review. While security updates are typically applied automatically, any exceptions are manually patched or addressed with other mitigating measures.
  3. Automatic recordings are taken of Fresh Start machines during courses, allowing Trainers to verify setup integrity. Recordings of the Trainer machine and Training Room are also optional. These features are fully controllable via the UI and can be disabled if not required.
  4. DaDesktop Operating System Templates are updated every few weeks to incorporate the latest security patches.