Security and Information Assurance for Connext DDS

Real-Time Data Security

RTI Connext DDS combines inherent authentication and encryption capabilities with an ecosystem of security-conscious partners to deliver confidentiality, integrity, and availability (the "CIA triad") of real-time data distribution, along with non-repudiation of transactional information. RTI continually enhances Connext DDS security through extensive research in areas such as security model refinement, authentication, domain partitioning, secure routing, metadata tagging/labeling, vulnerability analysis, and real-time intrusion detection.

Connext DDS Secure

For the world's first turnkey DDS security solution that is fully compliant with the OMG DDS Security specification, upgrade to Connext DDS Secure.

Two-Minute Topic: Connext DDS Secure

Download  |  Larger View

Secure WAN Transport for Authentication and Encryption

Keep your data under your control, even when it's not on a secured network. Make sure that only properly authorized applications will have access to your data.

The Secure WAN Transport allows Connext DDS applications to communicate securely over local and Wide Area Networks (WANs) such as the Internet. It is an optional set of transport plug-ins that can enable:

  • Firewall and NAT traversal
  • Secure message and data exchange
  • Channel and participant authorization

The Secure WAN Transport is based on proven SSL/TLS technology using industry standard X.509 certificates for authentication and confidentiality. RSA encryption using public key infrastructure (PKI) ensures that participants in your network are who they say they are and all data is secured en-route.

High-Assurance and Multi-Level Secure (MLS) Operating Systems

For applications with high assurance and fault tolerance requirements, Connext DDS supports operating environments such as Wind River VxWorks MILS, Green Hills INTEGRITY and LynuxWorks LynxOS-SE. Connext DDS also supports traditional MLS operating systems such as Solaris with Trusted Extensions and SELinux.