TriSept Security Enhanced Layer

TriSept Security Enhanced Layer (TSEL) is a Linux® based operating system designed for embedded devices, specifically tailored for satellites of all sizes. The primary goal of TSEL is to put security first, enabling customers to prioritize their mission requirements and build upon a stable and secure foundation. The security approach incorporates leveraging existing security knowledge by demonstrating compliance with industry standards, maintaining the latest upstream software packages and security patches to avoid vulnerabilities, and protecting communication confidentiality and integrity across multiple networks and service providers. TSEL also strengthens authentication and access controls, enables auditing and alerting of malicious behavior, and reduces the software and network attack surface. It protects against application and kernel-level exploitation techniques and ensures the integrity of applications, configurations, and communications at all levels of the stack, while providing trusted software updates and run-time environments. TriSept adapts technologies used to protect terrestrial servers for orbital applications, offering a customized Linux® distribution that integrates powerful security tools, secure configurations, and custom-built tools tailored to individual customer requirements. This includes hundreds of security controls derived from over a dozen industry standards, routine CVE monitoring and testing, full hash verification and key-signing from bootloader to applications, built-in exploit mitigation techniques, and audited kernel security features. TSEL also features full Role Based Access Control (RBAC) with account management and audit logging, support for Mandatory Access Control policies, end-to-end encryption of communications with disabled weak algorithms, full audit logging of security events, real-time remote monitoring and alerts, network firewall controls to limit and monitor communications, and strong authentication with account and password strength requirements and key-based authentication.