After successful evaluation by TÜViT, and recognition by the German Federal Office for Information Security (BSI), Arbit now has it in black and white that their data diode has been inspected under the Common Criteria (CC) at the highest possible test depth. This is confirmed by the first EAL7+ certificate issued to date under the German certification scheme.
The Data Diode – Eliminates threats of data theft and abuse
The physical characteristics of the Arbit Data Diode allow it to separate networks from one another. It ensures that data from an open network can enter a closed network via a Common Criteria EAL7+ certified hardware module (the diode), but that no data can flow back. In this manner the data stored in the closed network are shielded from the outside and thus protected against data theft or abuse.
The Success of the Project
At the start of the project, it was first necessary to establish the specific test methodology for an evaluation under EAL7+. This related in particular to the formal specification of the product, but also to the functional tests to be performed by both the manufacturer and the test laboratory. Specific testing tasks for the additional requirements of an EAL7+ evaluation were therefore defined by TÜViT in close coordination with the BSI, relating to the special context of the Arbit Data Diode.
To meet this end, Arbit has benefited from the services of the Danish firm Confiware and Arne Stig Peters who advised on the complete certification effort and has been a key contributor to the development, required CC document package and formal models of the Arbit Data Diode.
“Alongside a technically adept team at TÜViT, the successful conclusion of the project also required a manufacturer capable of openly engaging with the specific requirements - which were only defined during the process itself - with confidence in their own expertise.
At this point, however, I would also like to mention the responsible certification engineers at the BSI, who supported us at all times with their competence and focus,” concludes Dr. Ing. Alexander Schasse, project manager and IT security expert at TÜViT.
“As Arbit has gone to great lengths to achieve EAL7+, I would like to express my personal recognition for an exceptionally good and professional collaboration with Dr. Ing. Alexander Schasse and Dr. Ing. Sebastian Becker”, states Rasmus Borch, founder of Arbit.
Successful proof of the Arbit Data Diode's promise
The Arbit Data Diode works exactly as the manufacturer promises, a fact confirmed by the successful testing by TÜViT and is now awarded a CC certificate by the BSI. The list of Common Criteria certified products can be found here.
About TÜViT
TÜV Informationstechnik focuses solely on security in information technology and, as an independent testing service provider for IT security, is an international leader. Its portfolio includes cyber security, software and hardware evaluation, IoT/Industry 4.0, data protection, ISMS, Smart Energy, mobile security, automotive security, eID and identity verification services as well as the testing and certification of data centers for physical security and high availability.
TÜV Informationstechnik, founded in 1995 and headquartered in Essen, Germany, is a member of the TÜV NORD GROUP, one of the world's largest technology service providers with over 14,000 employees and business activities in 100 countries worldwide.
Contact TÜViT:
Dr. Ing. Alexander Schasse
Phone: +49 201 8999 564
Email: a.schasse@tuvit.de
About Confiware
Confiware is a privately owned company and was established in December 2007 by Arne Stig Peters.
Every year since Confiware was founded the company has been profitable and is today a well consolidated R&D consultancy provider of Cyber Security services.
Confiware has specialized in Common Criteria certification and Accreditation of classified systems according to both national and NATO requirements. Cooperation with National Security Authorities and the Information Technology Security Evaluation Facility (ITSEF) is performed on behalf of a wide range of Governmental and Industry customers.
Contact Confiware:
Arne Stig Peters
Phone: +45 29870402
Email: asp@confiware.com
Web: https://confiware.com
About Arbit Cyber Defence Systems
Arbit develops and manufactures a complete range of certified Cross Domain Solutions, allowing customers to run high-security networks based on Data Diode Technology. Our team of highly motivated employees combines highly specialized technology competencies and insights from high security organisations supported by commercial perspective and international business experience.
Arbit’s original clients include intelligent services, police, central Government and Armed forces – Across EMEA and Asia. Arbit has therefore launched its first full ‘ruggedized’ version developed for the Armed Forces. These products and features marked an opportunity to support a new market segment and a wider range of customers.
Simultaneously, the general desire to protect civil and commercial organisations against cyberattacks has sky-rocketed. Arbit is now pursuing a strategy to become relevant to an even broader audience by leveraging its strengths in technology, approach to customer service and insights from protecting the most critical, sensitive and valuable data.
Contact Arbit:
CEO, Rasmus Borch
Immerkaer 54
DK-2650 Hvidovre
Denmark
Web: https://arbitcds.com/
Email: info@arbitcds.com