White Paper

WHITE PAPER Software Security by Design mrcy.com 4 Titanium Secure Hypervisor leverages hardware-based roots- of-trust to perform a secure boot process and can optionally leverage hardware-provided security services at runtime. During system operation, the hypervisor enforces logical isolation such that software loads execute within private enclaves, even though they may be running on a single physical processor board. Titanium Secure Hypervisor also has strong technology and anti-reverse engineering protections built in. These features ensure that sensitive applications and data remain protected against unauthorized access, theft, and malicious modification – even in the face of dedicated hackers. Titanium Secure Hypervisor is uniquely designed to shield sensitive software technologies from unauthorized access, theft, or reverse engineering. These protections are in place at rest, during boot, and throughout system operation. In addition, Titanium Secure Hypervisor provides runtime memory protection and anti-debug capabilities to protect sensitive applications at runtime. Titanium Secure Hypervisor is configured to isolate execution domains from each other and rogue peripheral hardware. This provides the foundation for cyber-attack isolation by preventing errant or malicious code in one domain from being able to read/write memory, manipulate resources, or otherwise affect operations in another domain. Furthermore, the memory protections configured by Titanium Secure Hypervisor ensure that the hypervisor remains isolated from the execution domains as well as malicious peripheral hardware. Titanium Secure Hypervisor implements a number of best practices required for high-assurance systems, including comprehensive auditing of system activities, mandatory access control policies, and secure-by-default configuration options. Additionally, the hypervisor is able to perform runtime integrity monitoring of core service and app VMs. The Titanium Secure Hypervisor Foundry Tools enable pre- defined allocation and non-oversubscription of hardware resources to ensure processing determinism at the VM. This ensures critical applications within each execution domain are able to complete operations in a fixed amount of time without interruption. Furthermore, dedicated peripheral assignment and scheduling frequency for each VM are configurable to guarantee that critical services cannot be interrupted by less- critical VM instances. Finally, Titanium Secure Hypervisor addresses compatibility issues with production infrastructure including: ▪ Support for existing operating systems and software code bases, ▪ Support for both older and newer processor architectures, and ▪ Support for common bus protocols, backplanes, peripherals, and middleware/management controls. TITANIUM FOR LINUX Linux Hardening Security Suite For operationally deployed Linux systems, the Titanium Technology Protection offers the most robust Linux security capabilities available on the market today. Titanium Technology Protection encrypts protected entities at rest and prevents unauthorized access to them at runtime. During system operation, Titanium Technology Protection authenticates the protected entities, verifying that they have not been altered, and only decrypts files as they are needed. Decryption keys are themselves protected and stored out-of- band to the attacker. Titanium Technology Protection verifies signatures and checksums on data and configuration files before they can be accessed by a protected application. Titanium Technology Protection also verifies file provenance parameters such as type, location, and filesystem accessibility before allowing a protected application access to data and code. Titanium Technology Protection simplifies Mandatory Access Control policy creation, requiring policies be written only for protected applications, libraries, scripts, and data files. Titanium Technology Protection defaults to denying access to protected entities. The MAC enforcement engine assumes that the attacker already has administrator-level access. Thus, Titanium Technology Protection mandatory access control policies are themselves encrypted and authenticated as part of the secure boot process. Titanium Technology Protection removes unnecessary OS functionality which could help an attacker analyze system configuration, execution flow, and protected applications. Titanium Technology Protection-protected systems do not allow unsigned module loading or process debugging. Unlike SELinux or other security tools, Titanium Technology Protection-hardened configurations cannot be modified or bypassed in the field.

• Cover