Achieving cross-domain security

For the men and women in security-critical government roles, information isn't a "nice to have," it's absolutely crucial. The ability to acquire and share sensitive, timely information across multiple security domains is vital to homeland security, defense and intelligence decision-making, and may have life or death consequences.

While a few limited technical methods exist for sharing classified information across domains, they are largely inefficient and expensive. Specialized filters, guards, data pumps and data diodes each address some limited needs, but are often cost-prohibitive and difficult or impossible to integrate into the larger information enterprise.

At Galois, we're creating high assurance technology to provide true cross-domain collaboration. This technology has been engineered from the ground up to satisfy the most rigorous Information Assurance standards, and designed with core capabilities to meet a broad array of emerging information sharing requirements. Galois' suite of Cross-Domain Technology Services tackles crucial behind-the-scenes security architecture and policy issues with a deep understanding of the problem domain, thereby freeing those with mission-critical roles to concentrate on the job at hand.

Spanning multiple security clearance levels

Due to insufficient assurance, most cross-domain systems are severely constrained with respect to the environments in which they can be deployed (e.g. S and S-Rel). By developing technologies that can be assured at high levels (EAL6+), Galois is enabling analysts, mission planners, etc. to access critical information which may exist at any clearance level in near real time. Now more than ever, this ability has become essential as we work together with our allies, coalition partners, state, local and tribal agencies to share information.

Foundation for rich collaboration

Network-based collaboration can take on many forms, and is evolving rapidly. We're developing technology components consistent with emerging SOA practices, and capable of integrating into a variety of information workflows and with a wide variety of client tools. Examples include traditional approaches such as data files, text documents, and Common Operating Picture (COP) views, to more modern approaches like wiki's and blogs. Often our technology can be integrated with existing single-level tools without little or no modification, benefiting users with more collaboration options and richer functionality.

To learn more, read about our Cross-Domain Technology Services and Cross-Domain Projects.