Security Engineering
Decision Software Systems Inc. (DSS)
Provides Security Engineering
Areas of Expertise
Encryption Systems
• Development of Security Policies based on NSA/NIST Security Standards
• High Assurance Cipher Systems Development Systems and Software Engineering
• Design and Analysis of Encryption Engine/Algorithms
• Security Analysis Control, Red and Black Data Planes
Electronic Key Management Systems
• Expertise in Public Key Infrastructure Standard (PKI)
• Systems and Software Engineering Design and Analysis of Centralized Key Management Systems and Key Distribution Management Systems
High Assurance Security Systems
• Systems Engineering Services for Development of High Assurance Systems
• TEO – Theory of Equipment Operations
• FSDAR Fail-Safe Design and Analysis
• High Assurance Certification Criteria Systems Engineering
Network, Application and Data Security
• Systems and Software Engineering for Secure Management of Network Communications, Secure Applications and Secure Data.
• Multi-Level Security Systems – Expertise in Design and Development of MLS Operating Systems
• Security Analysis of Network OBAC – Organizational Based Access Controls and RBAC – Roles Bases Access Controls via Network Based Access Control Mechanism based on Least Priviledge Prinicipals.
Security Testing Services
• Systems and Software Engineering Development for Security Testing via Verification and Validation of Security Control Mechanisms to Assure the Protection Profiles Requirements of the Security System are Tested. Support Efforts for High Assurance Certification Efforts.
RMF/CMMC Compliance NIST SP 800-171/53R4
• Systems Security Engineering for RMF Compliance, DISA STIGS, Network Vulnerability Analysis, Firewalls, Intrusion Detection/Prevention, RMF Documentation, POAM, Automatic Patch Management Win WSUS/SCCM, Win Group Policies
Multi-Level Security Engineering
• Professional Services for Development of Multi-Level Security Operating Systems UNIX/MLS, MILS Hardware/RTOS Systems, Organizational Based Access Controls (OBAC) and Roles Based Access Controls (RBAC) for management of secure access to Applications, Databases, Data and Communications Channels.