Cryptek, Inc.

Referentia Systems, Inc.

Api Technologies Corporation

Api Cryptek Inc.

Timothy C Williams

Randall E Breeden

Robert Babiskin

David Gross

Richard Holtslander

Edward Browdy

Nelson T Kanemoto

A system includes buyer portal logic enabling a buyer to specify security requirements for attestation by a supplier. The system includes attestation program logic enabling the supplier to define a continuous attestation program for the security requirements through a supplier interface provided by supplier portal logic. The continuation attestation program includes an annual attestation program and a sub-annual attestation program. The system receives compliance attestation responses from the supplier for the security requirements and correlates the compliance attestation responses to the continuous attestation program for the supplier. The system enables the supplier to specify an access privilege for the buyer with regard to the supplier's sub-annual continuous attestation program data and/or annual attestation program data. The system generates compliance evaluation metrics for the supplier in real-time, which includes an overall risk level for the supplier, and exposes in real-time the overall risk level for the supplier to the buyer.

Systems and methods for managing and monitoring continuous attestation of security requirements

A method and system provide dynamic communities of interest on an end user workstation utilizing commercial off the shelf products, with central management and the ability for a users to log on only once (also known as 'single sign on' or 'SSO'). The software images that make up the virtual machine can be patched and updated with other required changes from a central storage area where the image can be administratively updated just once. A digital signature can be applied to the software images to ensure authenticity and integrity, along with determining whether a software image is up to date.

Method and systems for dynamically providing communities of interest on an end user workstation

An inter-networking system and method that provides for access control identifier (ACI) metadata utilization for the life of a session even on unknown networks being traversed, allowing for ACI metadata utilization, reutilization, and modification in both the send and receive paths (bi-directional), and allowing for metadata transport over network segments requiring that ACIs be embedded at different layers of the communications stack.

System and method for traversing metadata across multiple network domains at various layers of the protocol stack

A network prevents unauthorized users from gaining access to confidential information. The network has various workstations and servers connected by a common medium and through a router to the Internet. The network has two major components, a Network Security Center (NSC) and security network interface cards or devices. The NSC is an administrative workstation through which the network security officer manages the network as a whole as well as the individual security devices. The security devices are interposed between each of workstation, including the NSC, and the common medium and operate at a network layer (layer) of the protocol hierarchy. The network allows trusted users to access outside information, including the Internet, while stopping outside attackers at their point of entry. At the same time, the network limits an unauthorized insider to information defined in their particular security profile. The user may select which virtual network to access at any given time. The result is trusted access to multiple secure Virtual Private Networks (VPN), all from a single desktop machine.

Multi-level security network system

A mandatory access control system and method that employs a policy manager subsystem with virtual data labeling (VDL) on the communications channel to allow aspects about the data to determine by whom and where such data can be accessed. When combined with a secure network system, the VDL system is able to base delivery decisions not only on destination address but also on the type of data that is to be delivered.

Virtual data labeling and policy manager system and method

A mandatory access control system and method that employs virtual data labeling (VDL) on the communications channel to allow aspects about the data to determine by whom and where such data can be accessed. When combined with a secure network system, the VDL system is able to base delivery decisions not only on destination address but also on the type of data that is to be delivered.

Growing community of inventors

Sterling, VA, United States of America

Timothy C Williams