Securify SecurVantage™ is an automated security system that enables customers to generate business-driven security policies, monitor networks for compliance and produces relevant network operational information. This software product consists of an environment for policy development and security analysis, a real-time monitoring system to continuously verify conformance to business practices and security policies, and an enterprise management and trend reporting system. The SecurVantage™ system is driven by a customer-specified policy that formally describes the desired operation of the network.
\r\nSecurVantage™ relies on a proprietary policy language that translates business requirements and security policies into a formal, machine monitored specification (a “policy”) describing the “correct” behavior of the network. SecurVantage™ then evaluates, in real time, the packets flowing through the network at all levels of the protocol stack and makes decisions on whether the traffic is consistent with the policy specification. This information is then presented in a web-based analysis environment in terms that are specific to the business, and actionable for the network, operations and security teams responsible for the network.
\r\nSecurVantageTM consists of four major components:
\r\nThe evaluation was carried out in accordance to the Common Criteria Evaluation and Validation Scheme (CCEVS) processes and procedures. Securify SecurVantageTM Version 5.0 was evaluated against the criteria contained in the Common Criteria for Information Technology Security Evaluation, Version 2.2. The evaluation methodology used by the evaluation team to conduct the evaluation is the Common Methodology for Information Technology Security Evaluation, Version 2.2. CygnaCom Solutions has determined that the product meets the security criteria in the Security Target, which specifies an assurance level of EAL 3. A validator, on behalf of the CCEVS Validation Body, monitored the evaluation. The evaluation was completed in February 2006.
","environmental_strengths":"It is assumed that the there is no un-trusted software on the SecurVantageTM hosts and the users and Administrators on SecurVantageTM hosts are trusted. Users have different roles with different privileges. SecurVantageTM relies upon the underlying operating system platforms to provide reliable time stamps and to protect the SecurVantageTM hosts from other interference or tampering. SecurVantageTM relies upon widely used third-party software to provide protection of data transfer between the product components and for a trusted communication path between authorized administrators and the product.
\r\nSecurify SecurVantageTM Version 5.0 components communicate using the Secure Sockets Layer and Transport Layer Security (OpenSSL and PureTLS) protocol that provides data encryption and server authentication.
","features":[]}