WebRTC Solutions Industry News

TMCNet:  ASACoE Appointed Security Assertion Certifier for Air Force Applications and Services Hosted in the DISA Secure Technology Application eXecution Environment

[November 27, 2012]

ASACoE Appointed Security Assertion Certifier for Air Force Applications and Services Hosted in the DISA Secure Technology Application eXecution Environment

ASHBURN, Va. --(Business Wire)--

Acting in his role as Air Force Designated Accrediting Authority, Gen. William Shelton, commander of Air Force Space Command, has appointed the Application Software Assurance Center of Excellence to be security assertion certifier for Air Force applications and services hosted in the Secure Technology Application eXecution environment hosted by Defense Information Systems Agency (News - Alert).

ASACoE is the first and only organization given this appointment and will develop the processes to be used by future appointees. Using its suite of leading software assurance tools, provided by Telos Corporation and industry partners, to conduct static and dynamic analysis, the ASACoE will establish repeatable and reliable processes for validating the security posture of the Air Force applications hosted in STAX.

"As the security assertion certifier, ASACoE will apply their stringent software assurance assessment processes to the STAX environment," said Charisse Stokes, vice president for cybersecurity and network management for Telos. "This appointment ensures that the organization tasked with developing and implementing software assurance best practices for the Air Force will be the guiding light for applications transitioning to or developed in STAX."

STAX is a cloud capability for hosting Java and Microsoft (News - Alert) .NET Web services to be used by the Department of Defense. DoD's cloud computing strategy articulates a vision for acquiring and operating innovative, efficient, and agile IT in support of the DoD's mission anywhere, anytime, and on any authorized device. STAX is designed to aid the department's effort to bring that vision to reality by providing development, test, and production environments for compting, storage, network infrastructure, and software from a secure facility and under a single pricing model.

In 2007 Telos was awarded an initial task order to help ASACoE ensure application security best practices are incorporated across the Air Force, identify critical vulnerabilities, and secure Air Force applications. Leveraging Xacta (News - Alert)® IA Manager, Xacta Flux and other partner products, Telos is tasked with ensuring that applications address security hand-in-hand with performance and application availability throughout the system development lifecycle, significantly reducing the time and expense associated with remediation efforts. As the prime contractor, Telos assembled a powerful team, including application security industry leaders that specialize in source code analysis, web application penetration and security testing, application shielding, database monitoring, training and implementation services. The team includes Cigital, Inc., HP Enterprise Security (which includes the former Fortify Software, Inc.), IBM Rational and Application Security, Inc. As an option, products and services from Coverity (News - Alert), Aspect Security and Imperva are also available to the Air Force under this agreement.

About Telos Corporation

Telos Corporation has provided innovative IT solutions and services to the federal government for more than 30 years, focusing since 1997 on cybersecurity. Telos solutions ensure that the government's most security-conscious organizations comply with demanding federal and DoD information security mandates. Offerings include Xacta® IA Manager and other solutions for cybersecurity and information assurance, secure networks, network management and defense, mission applications and development, secure communications, and identity assurance and access. Solutions are represented to the federal government on Telos' GSA (News - Alert) schedule. For more information, visit www.telos.com.


[ Back To WebRTC Solutions's Homepage ]

FOLLOW US

Featured Podcasts

Oracle in Enterprise Communications

Most in the industry have heard of the acquisition of Acme Packet by Oracle. What you may not know is that Oracle has a number of telecommunications products including a UC suite, WebRTC Session Controller, and Operations monitoring tools. Oracle is pursuing both the enterprise and service provider.

Featured Whitepapers

WebRTC Security Concerns

This whitepaper covers two of the most relevant topics in communications industry today: WebRTC and security. We will introduce the problem of security in WebRTC including those traditional VoIP attacks that are going to be present in WebRTC services. Later we will mention ad-hoc WebRTC attacks and protection mechanisms, to close with an overview of identity management solutions.

Migrating Real Time Communications Services to the Web

In the Internet age, businesses that own fixed and mobile communication networks, including traditional Communications Service Providers (CSPs) of all kinds, are being challenged with some tough questions: How do we stay relevant to our customers?

Delivering Enterprise-Class Communications with WebRTC

WebRTC is an emerging industry standard for enabling Web browsers with real-time communications capabilities. It enables enterprises to enhance Web sites, empower BYOD users, and improve video collaboration and on-line meetings, to name but a few examples.

WebRTC Report Extract Reprint

This document examines the growing important of WebRTC, both generally and for telecom service providers. It considers the expanding range of use-cases, the multiple layers of interoperability likely to be desired by telcos, and some implications in terms of network integration and mobility.

WEBRTC SOLUTIONS PAPERS, SLIDES, COLLATERAL

Robust Enterprise Grade WebRTC Systems and Services


The emerging WebRTC standard has become one of the industry's hottest topics – and with good reason. Being able to "communications enable the web" has Communications Service Providers as well as Enterprises busily making plans for deployment. But, as these plans unfold, reality is starting to intrude on those plans. Our expectations of telephony services are much higher than web browsing. We expect the phone to connect instantly, operate with minimal disruption, and work seamless across any network, anywhere, at any time. There is also an understanding that phone service is inherently secure. With WebRTC, the expectation is for these applications to behave in the same manner.

This session looks at the user experience and expectations of a WebRTC Enterprise service. It will also cover how a WebRTC enterprise handles security, reliability, and interoperability within browsers and networks.

ORACLE COMMUNICATIONS WEBRTC SESSION CONTROLLER

The Oracle Communications WebRTC Session Controller enables communications service providers (CSPs) and enterprises to offer WebRTC services – from virtually any device, across virtually any network – with carrier-grade reliability and security.

Sales Presentation: Oracle Communications WebRTC Session Controller

Agenda:
- WebRTC Market and Opportunities
- WebRTC Challenges
- Oracle Communication WebRTC Session   Controller
- Summary

ORACLE COMMUNICATIONS WEBRTC SESSION CONTROLLER SOLUTION

Communication Service Provider (CSP) voice service revenues continue to face pressure due to shifts in communication preferences and competition from non-traditional service providers. Voice communications are now often embedded into applications outside the domain of traditional telephony voice usage. CSPs have been challenged to effectively leverage and monetize new web-oriented communications technologies.