EXPLORINEER
en

KR — 전자신문

Tilon's Dstation X Obtains NIS Security Function Verification Certificate, Clearing Public-Sector Adoption Requirements

Security2 min read

Tilon, a virtual desktop (VDI) company, says its new product Dstation X v10.0 has received a security function confirmation from South Korea's National Intelligence Service (NIS). This lets public agencies buy it without a separate security check.

What happened

Tilon announced that its next-generation VDI platform, Dstation X (version 10.0), received a 'security function confirmation' under the NIS security testing system. Tilon already had a GS certification grade 1 and was listed on the Public Procurement Service's Digital Service Mall. With this new confirmation, Dstation X has now cleared the quality, purchasing, and security checks needed for public agencies.

Key facts

  • Product: Dstation X, version 10.0
  • The earlier Dstation v9.0 was the first VDI product to get this confirmation
  • Dstation was the first Korean server virtualization product to get CC certification (EAL2), in 2014
  • In 2023, a cloud service based on Dstation v9.0 got the CSAP cloud security certification together with KT Cloud
  • Dstation X is registered as a third-party contract for commercial software, so agencies can buy it without a separate bid

Why the confirmation matters

When a government agency adopts a product with security features, it normally must pass a security check first. A product with this confirmation can skip that step. The change is mainly about time: agencies no longer have to apply for a separate check and wait for the result. The company says this also cuts the paperwork and time from choosing a product to buying it and checking its security.

Why it matters

Public agencies are moving to new network rules, such as easing the separation of internal and external networks and switching to the National Network Security Framework (N2SF). They are also adding generative AI. Dstation X is designed to control and record user access and data movement, which fits these needs. Tilon plans to target new VDI and DaaS projects at central ministries, local governments, public bodies, and schools.

What to watch

  • Whether Tilon wins new VDI and DaaS deals with government and education customers
  • How smoothly existing Dstation v9.0 customers move to version 10.0
  • Progress on linking Dstation X with Tilon's AI products, iStation and TStation, into one secure workspace

Glossary

VDI
Virtual desktop infrastructure: runs many computer desktops on central servers, and users connect to them from their own devices.
Dstation X
Tilon's next-generation VDI platform for secure, large-scale use by public, financial, and business customers.
N2SF
National Network Security Framework: applies security controls based on how important the information is.
DaaS
Desktop as a Service: a cloud service that gives users virtual desktops, often rented to many organizations.
CC certification
An international security certification that checks whether a product's security features work as claimed.

Ad

Add 150 words. Learn 10 a day.

Dicter word books send only the words you learn to your review notes.

More in this topic

SecurityITmedia

Muji's MUJI Card Full Card Numbers, About 1.09 Million Records Possibly Leaked in Unauthorized Access Follow-Up

Ryohin Keikaku said credit card information, names, and addresses that it had initially excluded may also have been accessed by outsiders in the unauthorized access to its MUJI app. Newly identified data includes about 1.09 million member records for the MUJI Card, covering full card numbers, MUJI Card IDs, and birth dates, of which about 345,000 cards remain valid.

SecurityITmedia

Chinese Manufacturer Allegedly Installed Criminal Backdoor on Android Devices Before Shipment; Google Cuts Ties

Google said on November 3 (local time) that more than 1.3 million devices, mainly Android TV set-top boxes, were infected with malware made by Chinese OEM/ODM maker Videostrong Technology, which sold remote access to criminals. Google ended its relationship with the company, barred it from making Google-certified Android devices and supplying software to other certified makers, and disrupted the botnet with law enforcement and security partners, including Japan's National Police Agency.

SecurityITmedia

Denny's App Hit by Unauthorized Access; Fraudulent Credentials Created During Legacy App Migration, Possible Personal Data Leak

Denny's Japan announced on November 3 that its app, which manages coupons and points for its restaurants, was accessed by a third party and that some users' personal data may have leaked. During a system process to migrate from the old app to the new one, unauthorized credentials were created, giving access to some users' accounts; the number of affected people is still under investigation. The company says it does not hold names, addresses, phone numbers, passwords, or credit card information.

Securityheise online

Sabotage of Cooling Systems: Expert Criticizes Manufacturers

After cyberattacks on supermarket refrigeration systems in several European countries, including Germany, IT security expert Christoph Fischer of Karlsruhe places primary responsibility on manufacturers of networked devices, calling the delivery of control systems with unchanged factory settings and default passwords "completely unforgivable." He says manufacturers should configure systems so that individual passwords must be set at first commissioning, and that secure remote access via certificates and asymmetric encryption is technically feasible. Fischer also warned against limiting the problem to grocery retail and urged that verification of IT security be added as a criterion in consumer tests.