Secure Inter-organizational Network Boundary Assurance Device (SINBAD)

This effort proposes to design, develop and productize the Secure Inter-organizational Network Boundary Assurance Device (SINBAD). SINBAD will leverage capabilities and leverage lessons from guard technology to yield an enhanced boundary control and inspection capability suitable for Homeland Security organizations exchanging inter-organizational email with attachments. It will 1) prevent improper disclosure of an organization¿s sensitive information, and 2) protect an organization¿s Information Technology (IT) infrastructure from outside penetration. Instances of SINBAD will be installed between an organization¿s internal network and existing firewall. The SINBAD design will be modular and extensible thus able to leverage software inspection capabilities developed by third parties within an affordable yet secure network appliance. SINBAD will rely on an SE-Linux Operating System in order to secure the operating.SINBAD will be packaged as a preinstalled 1U to 2U network device allowing it to easily be connected to a network, configured and made operational. Essential SINBAD capabilities will likely include: virus detection, PuriFile scanning,in depth file type verification, sender/receiver validation (to include digital signatures should PKI exist within the organization), enforcement of port-address restrictions, malicious code detection, dirty word checking, content screening based on semantic distance, remote administration, feedback and quarantine of denied transfers, crisis override and an easily configured XML-based policy model which is stored in a backend database.