CommPower's Security Policy Translation Table (SPTT) Toolset

CommPower's Security Policy Translation Table (SPTT) Toolset

The CommPower Security Policy Translation Table (SPTT) Toolset supports generation and maintenance of configuration tables that specify the translation rules for converting legacy security labels (classifications, categories, and caveats) to/from X.411 security labels used in S/MIME-V3 ESS and DMS MSP/CSP.

The SPTT Toolkit consists of the following individual tools:

Security Policy Translation Table (SPTT) Editor

The Security Policy Translation Table (SPTT) Editor supports the creation and maintenance of the SPTTs used by the MFG for purposes of security label validation and translation.

Features supported by this editor include the following:

1. Specification of multiple spellings per defined classification, category, and caveat.
2. Specification of implied "default" categories to be inserted automatically into the generated legacy or X.411 security label for specific label combinations.
3. Rules for rejection or acceptance of labels with extraneous categories and caveats.
4. Directional translation indicators to allow different translations to be specified per message flow (i.e. legacy to X.400 or vice-versa).
5. Definition of multiple SPTT tables, one per security policy supported (i.e. NATO, local, U.S.).

Security Policy Selection Table (SPST) Editor

The Security Policy Selection Table (SPST) Editor supports the creation and maintenance of the SPST table, which instructs the MFG as to which SPTT to apply for the current message being processed.

Criteria for this rule set include legacy format line 2/4/12 pattern matching (i.e. use NATO SPTT for legacy messages with the phrase "NATO" in format line 12); X.411 security policy OIDs; and wildcard defaults.

Security Policy Translation Table (SPTT) Simulator

The Security Policy Translation Table (SPTT) Simulator allows the operator to verify the contents of the SPTT tables thru simulation of actual security label translations (legacy and X.411). During the simulation phase, the source label, translated label, and any translation discrepancies are clearly displayed to the user via a comprehensive graphical interface.

To expedite the test cycle, the SPTT Simulator allows previously generated labels to be stored to disk and reused on demand. Thus, the labels of a test suite need only be generated once, yet can be used to verify new/updated SPTTs.

<Back to Software Products