2
103 Bonaventura Drive | San Jose, CA 95134 USA +1-408-392-9131 | FAX +1-392-0319 https://www.SPYRUS.com Confidential https://www.SPYRUS.com +1-408-392-9131 | FAX +1-392-0319 Texas A&M University Secure Research Enclave Authentication & Access Control Use Case SPYRUS Solutions, Inc. is pleased to provide this solution brief illustrating how our security solutions are employed by Texas A&M University (TAMU) for strong Authentication and Access Control necessary to protect Controlled Unclassified Information (CUI) Intellectual Property (IP) developed under Granted Research funded by the U.S. Government (USG). The USG funds Higher Education more than $60 billion in research grants annually. The top 50 Research Universities (such as TAMU), each with tens of thousands network users, receive $100s of millions where the resultant CUI research must be protected with strong data protection, identity & access controls. For over a decade, foreign actors have been quietly collecting and exfiltrating research and data for both military, strategic and monetary advantages. As an example, a study by the Australian Strategic Policy Institute China’s People’s Liberation Army (PLA) is expanding its research collaboration with universities outside of China. The PLA sponsors more than 2,500 military scientists and engineers to study abroad and developed relationships with researchers and institutions. At TAMU, Principal Investigators (PI) are transparent and collaborative with their research. However, at any given time there are close to ten thousand visiting professors and graduate students, many from nations hostile to the USG. Traditionally access to the TAMU network, its servers and research data has not been segregated and mostly binary. Meaning anyone with a campus access username and password had the same access to most everything on the network. The USG has addressed this by creating a standard that governs CUI in Non-Federal Information Systems and Organizations. ... Doing so helps the federal government “successfully carry out its designated missions and business operations.” The USG is enforcing this standard by applying acquisition regulations that require compliance with this standard to all existing and future contracts and grants. Maintaining security and ensuring that core, fundamental information assurance requirements are met, while respecting the research needs of staff, students, researchers, and independent contractors is essential to protecting research CUI. To that end, the TAMU Research Security Officer funded the development of a Secure Enclave and turned to SPYRUS to provide a easy to use, single sign-on Authentication and Access Control Solution that provides data protection at rest (at the servers and at the user device) and data in motion (between the servers and user devices). At the heart of the TAMU solution is our enterprise management platform. The SEMS Platform manages devices protected by the SPYRUS Cryptographic Operating System (SPYCOS ® ) to provide a true end-to-end security approach to user access and the protection of data at rest; in transit in accordance with industry and USG compliance regulations. With the SEMS Platform user/ device management, enterprise administrators can centrally register, block/ unblock, revoke, set policies, integrate 3rd party applications for secured access, audit, and “kill” SPYCOS protected devices, remotely. The SEMS Platform provides a high security and productivity solution for organizations deploying the strongest authentication encrypted access/ data protection when used by today’s mobile workforce; as well as, remote assets that includes audit and policy enforcement of high capacity, small form factor devices. Common Management Platform Across the Entire Enterprise. The SEMS Platform manages all enterprise endpoints via SPYCOS that can be integrated into any computing device. SPYCOS provides precise protection and management of all key material and algorithms necessary to achieve the highest levels of encryption and strong authentication. Provision: an enterprise can manage their data assets wherever they are used via a central, web-based, easy to use management interface to control and monitor SPYCOS protected endpoints. Secure: Robust role management for administrators, permits separation of responsibilities and enforcement of enterprise security policies. Recovery is easily facilitated to protect against data loss and employee downtime. Manage: Maintains audit records of management activities performed at the Management Console, as well as endpoint activity on SPYCOS protected endpoints. Terminate: keys protected with SPYCOS can be temporarily disabled or destroyed, on demand. When things go wrong, the ultimate assurance that your assets don’t fall into the wrong hands is provided. When things go really wrong, a remote device kill operation renders the data protected by SPYCOS unusable. Our Cyber Security Systems Engineering team’s rich experience in data protection initiatives worked closely with TAMU to assist with architecting and implementing “data protection by design and by default” that eliminated data breach exposure of more than $500 million of Granted Research. The TAMU implementation offers its users a simple single sign- on experience with the highest levels of protection: 1. The SPYRUS Toughboot is used to decrypt the devices Solid State Drive and open PKI Store (with one or more activation codes as dictated by the enterprise).
![DANIELE DI BONAVENTURA EU TE AMO DANIELE DI … · EU TE AMO [The Music of Tom Jobim] BON180801 Daniele di Bonaventura [bandoneon] Giovanni Ceccarelli [piano] Featuring Camille Bertault](https://static.documents.pub/doc/80x56/605d9555c6a755557214b3f4/daniele-di-bonaventura-eu-te-amo-daniele-di-eu-te-amo-the-music-of-tom-jobim-bon180801.jpg)
