Solution
Seclab Secure Xchange USB
Seclab
https://www.seclab-security.com/seclab-sec-xu/
- Where it is used
- SNCF
- Open source
- No
- Railway specific
- No
- Niche product
- No
- Easy to install
- No
The prime use of Secure Xchange USB is the safe connectivity of a laptop/system to the USB port of a machine (Programmable Logic Control, Kiosk, Embedded system) for diagnostic or program update.
Secure Xchange USB has been designed to relieve operations from having to analyze any USB Mass storage prior to connecting to a machine.
Connecting any device to the USB port of a machine may introduce threats of varying impact. Secure Xchange USB aims to remove those threats and avoid any potentially unwanted control of the machine by any malware hidden in the USB device. The USB protocol enables anyone to use an off-the-shelf product to find a way to reprogram firmware, update firmware, a legitimate process.
The reality is simple: as users, we tend to trust peripherals, i.e., you trust your flash drive, you trust your keyboard, but you trust it because you’re not aware.
Features
A machine insulated by Seclab: Neutralizes any threat at USB layer; Can decide if file transfer can be allowed through USB in either direction; Enables file filtering thanks to certificates checking. Enables content filtering in “service chained” mode with 3rd-party malware detection In short, this is robust Hardware-Based-Security.
Benefits
befored deloyment there were a lot of infections per year with impact on operations (visible risk for the image + operating problem because the switches had to be handled manually Today this risk is under control
Proof of concept
SNCF
Proof of concept result
2015