link22 Delivers Eavesdropping Protection to Law Firm Glimstedt

October 6, 2023October 12, 2023

For many years, link22 has delivered eavesdropping protection in the form of Shield to authorities and the defense industry. This week, the product was introduced to the legal sector, another area where confidential information is frequently discussed in meeting rooms. The law firm Glimstedt is now positioning itself as one of the industry's most eavesdropping-protected player.

In the digital age we live in, the protection of confidential information is more important than ever. Law firms, like Glimstedt, constantly face the challenge of ensuring that their client meetings remain private.

During the delivery, the reasons why the legal sector wants to prevent recording of meetings, whether intentionally or unintentionally, via mobile phones were discussed. This is partly about meetings with clients, where one wants to prevent an external party, who may have accessed the client's mobile through malicious software, from eavesdropping to gain an information advantage. But it's also about meetings with opposing parties. Gustav Sandberg, Managing Partner at Glimstedt Östergötland, puts it this way:

"When meeting with clients we sometimes want to avoid tapping if for example we’re discussing business secrets. When meeting with counterparts we sometimes want to avoid the risk of being recorded. It’s very easy to do today, a recording can be misused and we want to minimize such risks. Our clients expect and value our confidentiality."

Beyond the direct functional reasons for having eavesdropping protection in meeting rooms, there's also a signaling value. The goal is for both clients and opposing parties to take our meetings more seriously, while feeling more relaxed.

During the delivery meeting, Daniel Lester, Business Area Manager, described how Shield works with sharp noise, rubber packing, separation material, tamper protection, security levels, and more. He also demonstrated how easy it is to use the product: You open the lid, participants put in their phones, and then you close the lid. The phones are in the room, for all parties to oversee, but not recording or eavesdropping.

In a world where information can easily spread and be misused, it's crucial for companies, especially law firms, to take measures to protect confidential information. link22's Shield offers an effective solution for this. The delivery to Glimstedt is a step towards ensuring integrity and security during meetings. With Shield, law firms can now feel safer, knowing that their confidential meetings remain just that - confidential.

link22 launches eavesdropping protection for the Swedish market

September 27, 2023September 28, 2023

At a time when the possibilities for attacks are increasing, link22 continues to launch solutions for enhanced security. We are proud to introduce Audio Diode to the Swedish market, a product designed to prevent eavesdropping through speakers.

Hackers have become increasingly sophisticated, with techniques that can convert speakers into microphones, allowing them to eavesdrop on conversations. The attacker achieves this by recording the signals that appear when a speaker membrane vibrates due to speech in the room (this evokes a signal traveling “backwards” in the sound cable). The recorded signals are then converted back to speech in the attacker's computer and the eavesdropping operation is successful. With Audio Diode, the user can ensure that speakers only operate in one direction, preventing sound signals from traveling backward. This prevents eavesdropping.

"We are proud to offer a solution like Audio Diode. It is a product that not only offers high security but also gives our customers peace of mind knowing that their talks are protected," says Daniel Lester, Business Area Manager at link22.

international-collaboration-between-link22-and-glasswall-to-protect-businesses-from-zero-day-threats-thumb

link22 – Glasswall collaboration to protect against Zero Day Threats

June 15, 2023June 15, 2023

The Swedish cybersecurity company link22 has strengthened its collaboration with British Glasswall to provide advanced protection against zero day threats (previously unknown threats). The partnership allows customers to combine link22's security solutions with Glasswall's Content Disarm and Reconstruction (CDR) function. link22 now delivers an enhanced defense against Zero Day attacks, a type of threat where traditional defensive mechanisms have been ineffective.

The simplest way to understand CDR is to compare it with traditional defense methods. Firewalls and filters work by identifying and blocking known threats, that is, viruses or software that have previously been classified as harmful. Threats generally become known after the first incident. Therefore, firewalls and filters do not protect against undiscovered threats, such as zero day attacks. CDR addresses this vulnerability by converting each file into a harmless file, regardless of whether the original file was harmful or not.

By dismantling, validating, cleaning, and then reconstructing files based on specifications for known and well-defined file types, CDR transforms passive security strategies into active ones. The implementation of this technology represents a significant improvement in the security of file transfers from, for example, open IT environments to isolated IT environments.

The seamless integration of Glasswall's CDR technology into link22's Cross Domain Solution makes it easy for existing and new customers to implement a higher level of security. The technology can be used for both the import and export of information, within and between security domains. The partnership enhances the capabilities of link22's Cross Domain Solutions.

link22 has customers with specific and complex requirements. To meet these, the company uses both internal expertise and partnerships with niche players such as Glasswall. They do what is necessary to deliver uncompromising security.

Inspect: Three layers of the file are inspected to validate that its digital DNA matches the manufacturer's specification of a harmless file. Measures are taken immediately where deviations are detected.
Clean: Active content of a risky nature, such as macros and embedded links, is cleaned and removed based on the user's policy.
Reconstruct: The file is reconstructed according to the manufacturer's standard for a harmless file type, ensuring that the file is clean and free from threats.
Deliver: The user has imported a secure, identical file that is approved, standardized, and trusted.

The collaboration with Glasswall illustrates link22's commitment to staying at the forefront of delivering secure IT solutions. Are you interested in heightening your defense against Zero Day Threats? Please book a demo with us!

New Release Secure Access Client – version 1.7

June 1, 2023June 15, 2023

A new system for hiding resources based on user location has been added. Each resource has a classification level, and the application will only display resources with a classification level no higher than the maximum allowed level in the location the user is connecting from. The users location is determined based on Active Directory sites and subnets.
New registry entries “Locations” and “Security Classification Levels” have been added to support the above feature.
Added colouring to Icons depending on their classification levels.
Added zoom controls for the resource view and keyboard shortcuts using Ctrl+ and Ctrl-.
The refresh button now refreshes resources, SCLs, locations and runs gpupdate to update group policies.
Made the notification bar more prominent when messages are displayed.
Added Shut Down button to the system menu in the bottom left.
Added username and location information to About menu.
Resource view buttons become greyed out when they cannot be used.
Added support for newline (\n) characters in resource names and descriptions.

Productnews – link22 Offline Update

April 20, 2023April 24, 2023

link22 can now offer a product solution to ensure and automate downloads to physically separated environments. The solution ensures that downloads are inspected and managed over unidirectional data flows.

The process is fully automated, information is fetched, reviewed, and then distributed to different locations in the target system. Files are inspected by link22 Data Guard, where a thorough inspection of each file takes place. The file is broken down into its components to detect vulnerabilities. Inspection can be done with traditional antivirus software, but we also support "Content Disarm and Reconstruction" (CDR), where each file is checked in detail to detect and remove unwanted information. For example, with CDR, we can remove embedded code in Office files. (CDR requires a separate license.) link22 Data Guard has an open architecture that allows for the addition of further customer-specific filters. Extending with additional filters is easy with our development kit.

Three government security challenges solved with data diodes

January 27, 2023February 17, 2023

Appropriate data security

As government authorities are becoming more vulnerable to various types of cyberattacks, it is crucial to prioritize cybersecurity and implement systematic measures to protect against these threats. An important aspect of cybersecurity is selecting the appropriate solutions, such as data diodes, which are designed to withstand attacks and provide a high level of security for sensitive information. By utilizing data diodes, government authorities can effectively address a range of IT security issues and ensure the protection of data security.

The data Diode

A data diode is a cybersecurity solution that utilizes one-way-communication to exchange information. This hardware product provides high assurance in maintaining the integrity of networks by preventing intrusions, while also protecting sensitive information through maintaining network confidentiality. Data diodes are an important part of any comprehensive cybersecurity strategy.

Data diode or Firewall?

When it comes to protecting sensitive or classified information from leakage or manipulation, one common solution is to completely disconnect it from other networks. However, there may be times when data needs to be transferred to or from the protected network. In these cases, a firewall may not be sufficient for improving cybersecurity. While a firewall can help protect the network by only allowing certain traffic through, a high assurance supplement in the form of a Cross Domain Solution (CDS) may also be necessary. A CDS, like a data diode, helps to maintain secure information exchange between domains with different security or protection needs. Data diodes, specifically, are a type of CDS that facilitate communication, sharing, or movement of information between domains while also applying validation, transformation, or filtering to the exchange.

Secure File Transfer

One use of data diodes for government authorities is secure file transfer. When transferring important information from a high-security system to a lower-security administrative office network, there is a risk of security breaches. However, by using a data diode to send the data from the high-security network to the lower-security network, the information can be transmitted safely while maintaining the integrity of the high-security network. The data diode ensures that no one can use the same connection to access the sensitive network and potentially manipulate it while also protecting the sending domain.

Learn more about the functions of data diodes here.

Using data diodes for traceability and logging in security-sensitive operations

Centralized log collection in security-sensitive systems can increase the risk of attacks. To mitigate these risks, a solution is needed that protects both log information and all connected systems.

Many IT systems generate logs that allow for troubleshooting and traceability. To maximize the usefulness of these logs, it is important to collect logs from as many systems as possible into a central system for storage and analysis.

If you have security-sensitive or zoned systems and want to implement centralized log collection, you must consider the inherent goal conflict. Logging benefits from having a common system for all zones/subsystems, but a common system increases the risk of various types of attack and the risk of information leakage between the supervised systems.

Data diodes can provide powerful protection for centralized log collection. Each zone that delivers log information is protected with a data diode. The data flow is unidirectional towards the log system. This allows for the use of a common log system, regardless of the number of zones that deliver data to it.

Secure Updates

As the use of Windows and/or Linux based systems within ICS/SCADA has grown, the need to update these systems has become more pressing. This is because complex software often contains bugs that need to be fixed in order to maintain system stability and security.

However, if not done properly, the process of updating can itself pose a security risk. The integrity and availability of the systems must be maintained, and most system updates are not adequately evaluated in the environment in which they are used or in combination with the applications that are running.

One way to securely perform updates is by using a data diode to ensure one-way communication. The data diode is connected in such a way that information can be imported into the system, but since no traffic can be transmitted in the opposite direction, information leakage is prevented.

We know the in and outs of data diodes from a cybersecurity point of view. Please do not hesitate to ask us anything.

Book a demo or a meeting here.

A national safety discussion secured by Shield

January 10, 2023January 11, 2023

A meeting between military Officers and the ministry of defense is held with security support from Shield

Mobile phones are relatively easy to use for eavesdropping on meetings. Phones are therefore an attractive target for foregin powers who want to conduct espionage. They can be hacked through downloaded apps that have access to the microphone and by physically getting a hold of the phone to install malicious software. This means that a phone should never be left out of sight and that a phone never should be laying around during a meeting where sensitive information is discussed. An obvious cyber security conundrum.

Safety meeting

Shield is our solution to this problem, a noise-box especially developed to make phones less of a security risk. Here is an example of how Shield can be useful in a meeting between politicians and national defense.

Two high ranked officers have a meeting with the defense ministry and two politicians from the ruling party. None of the participants want to leave their phone out of sight as it is a security risk for them. They enter the meeting room and put their phones in Shield. One of the politicians has a smartwatch that she puts in the Shield. The meeting is held at full discretion.

Cyber security for the toughest security requirements.

December 21, 2022February 17, 2023

More of everything

We feed more people with fewer resources, we educate more humans faster and more people live in luxury. All thanks to the printing press, the agricultural revolution and the industrial revolution. It's now clear that digitalization is taking over in order to optimize and improve society further. Products are being connected, information is being created and shared in real-time, people are meeting, value is being saved on blockchain networks, and the list goes on. Society is changing fundamentally and everyone is affected.

Cybersecurity

What was once protected by guards, locks, and long distances need new types of defense in our digital world. Cybersecurity is essential to maintain function and security in society. Our product portfolio is the result of 16 years of helping organizations and businesses meet the highest security requirements. We offer the market-leading off-the-grid laptop Outpost, which is used by hundreds of customers. Outpost is the best in the industry and ensures compliance with the highest security requirements in Sweden.

Full control

Government agencies, businesses, municipalities, defense forces, infrastructure, and individuals are all interconnected. The economies of scale are obvious and the challenges are many.

How do we protect critical infrastructure? How can we digitize government agencies without jeopardizing the integrity of the citizen? How can we link domains with different security classifications? How do we give people access to data without making them targets for extortion? How do we make it easy for citizens to administer their personal data without enabling manipulation from anyone else?

Take back control

To have full control, meet data security requirements and privacy guidelines, the solution in many cases is a so-called on-premises solution. We are specialists in this area. A number of cases have taught us how a government agency or company can maintain its effectiveness without having servers, data storage or processor power outsourced to a third party. Full control without compromise.

Adaptability

The digital landscape is constantly changing, so adaptability is key. We deliver ongoing modular solutions to help our customers who constantly face new needs, requirements, and threats. We are a long-term and reliable partner in an ever-changing world of cybersecurity.

Shield preventing insider trading within big pharma

December 8, 2022December 8, 2022

Shield helps to safely reveal test results from cancer medicine research within a pharmaceutical company

Mobile phones are relatively easy to use for eavesdropping on meetings. Phones are therefore an attractive target for competing companies and insider traders who can benefit from conducting espionage. They can be hacked through downloaded apps that have access to the microphone and by physically getting a hold of the phone to install malicious software. This means that a phone should never be left out of sight and that a phone never should be laying around during a meeting where sensitive information is discussed. An obvious cyber security conundrum.

Shield is our solution to this problem, a noise-box especially developed to make phones less of a security risk. Here is an example of how Shield can be useful when sensitive information is to be discussed at a big pharmaceutical company.

Insider trading prevention

A publicly traded pharmaceutical company that is a lucrative target for insider traders has an internal meeting to go through test results for a new cancer medicine. The information of discussion will heavily affect the stock price. None of the participants can leave their phone out of sight since an unattended phone is at risk of being manipulated. All phones and smartwatches are put inside Shield before anything regarding the tests results are discussed. Shield is placed inside the meeting room.

The NIS2 Directive

November 24, 2022August 22, 2023

The NIS Directive affects each company and organization differently, there is no one-size-fits-all solution to meet the requirements and stay efficient. It can be hard to assess whether or not the NIS Directive affects your company at all. We have helped governments, organizations and companies with challenges like this for 16 years and can be of use in many ways. It can seem complicated to determine what this means for you; what are you obliged to do or not to do? If you are unsure about this we suggest that you book a demo with us where we make an assessment together. Based on your situation we reason together and specify what you need to do to meet the new requirements and most importantly to secure what's valuable in your possession.

The NIS directive means generally stricter security requirements around information security. Concerned entities must consider people, process and technology when securing information. They need to classify information and systems. These entities must also prepare for the eventualities that an attack may lead to and specify action plans to increase resilience. Continuous knowledge gathering by incident reporting is mandatory with the purpose of always becoming more prepared. Companies and organizations are expected to direct their NIS-related actions towards network and information-systems.

The NIS directive is a useful place from which to start making valuable cybersecurity improvements. Best practice in this case may be to first create an overview of the organization as a whole and then extract potential and useful changes in order to improve information security. Some processes are crucial for core functionality, some individuals have access and responsibilities that make them targets for extortion and some parts of the technical infrastructure are more vulnerable than others. This is properly complemented by an external assessment of the external cybersecurity landscape, specifically what kind of attacks that are common and what kind of attacks that may become common in the future. Information transfer between security domains and/or networks are, for example, one of the most exposed and vulnerable situations in cybersecurity today. Implementation of data diodes, countersign and encryption are three actions that will make a significant difference for many organizations in the coming years. Separate domains for different security levels is a good idea that can be implemented when one has specified what information is more important than the other. A clear information hierarchy is necessary to maintain efficiency and security.

European companies do not have sufficient ability to defend themselves against cyber attacks
European companies do not have sufficient ability to stay operational during a cyberattack
European companies do not have sufficient ability to return to normal functionality after a cyberattack
Some sectors and states are significantly stronger than others, the European digital landscape has obvious weaknesses
The cyber threat awareness among EU member states is low
There are no common crisis management practices regarding cyberattacks within the EU

NIS2 covers more sectors and more companies and organizations within each sector. The original NIS-directive considers energy, healthcare, transport, finance, water supply and digital infrastructure as critical for a functional society. With NIS2, public administration, pharmaceutical production, critical medicine technology and space has been added to the list.

The NIS2-directive also affects sectors in the periphery of critical infrastructure, these include; waste disposal, chemicals, post service, food, motor vehicles, production of medical machines, computers and electronics, machine equipment and digital suppliers

The majority of affected entities are medium and large enterprises within the above mentioned sectors but some small companies may also be affected depending on their profile.

1 2

Cookie	Duration	Description
cookielawinfo-checbox-analytics	11 months	This cookie is set by GDPR Cookie Consent plugin. The cookie is used to store the user consent for the cookies in the category "Analytics".
cookielawinfo-checbox-functional	11 months	The cookie is set by GDPR cookie consent to record the user consent for the cookies in the category "Functional".
cookielawinfo-checbox-others	11 months	This cookie is set by GDPR Cookie Consent plugin. The cookie is used to store the user consent for the cookies in the category "Other.
cookielawinfo-checkbox-necessary	11 months	This cookie is set by GDPR Cookie Consent plugin. The cookies is used to store the user consent for the cookies in the category "Necessary".
cookielawinfo-checkbox-performance	11 months	This cookie is set by GDPR Cookie Consent plugin. The cookie is used to store the user consent for the cookies in the category "Performance".
viewed_cookie_policy	11 months	The cookie is set by the GDPR Cookie Consent plugin and is used to store whether or not user has consented to the use of cookies. It does not store any personal data.

Search

link22 Delivers Eavesdropping Protection to Law Firm Glimstedt

From Defense to Law

Eavesdropping Protection & Law

Simple & Advanced

Read more

Related

Contact us!

Sign up for our newsletter!

link22 launches eavesdropping protection for the Swedish market

Speakers can be used for eavesdropping

Audio Diode to protect sensitive information

Audio Diode against a real security risk

Low-pass filter

Unidirectional sound flows

Simple protection against advanced threats

Read more

Related

Was the article valuable?

Sign up for our newsletter!

Do you want to know more?

link22 - Glasswall collaboration to protect against Zero Day Threats

Collaboration against Zero Day attacks

Integrates seamlessly with the link22 Cross Domain Solutions

CDR operates in four steps

Read more

Related

Was the article valuable?

Sign up for our newsletter!

Do you want to know more?

New Release Secure Access Client - version 1.7

New features 1.7

Read more

Related

Was the article valuable?

Sign up for our newsletter!

Do you want to know more?

Productnews – link22 Offline Update

Three government security challenges solved with data diodes

Appropriate data security

The data Diode

Data diode or Firewall?

Secure File Transfer

Using data diodes for traceability and logging in security-sensitive operations

Secure Updates

A national safety discussion secured by Shield

A meeting between military Officers and the ministry of defense is held with security support from Shield

Safety meeting

Cyber security for the toughest security requirements

More of everything

Cybersecurity

Full control

Take back control

Adaptability

Shield preventing insider trading within big pharma

Shield helps to safely reveal test results from cancer medicine research within a pharmaceutical company

Insider trading prevention

What is the NIS and NIS2 directive?

About the NIS directive

link22 and the NIS Directive

What does the term “directive” mean in this context?

Why does the NIS directive exist?

Digitalization gave rise to NIS and NIS2

The NIS directive affects certain industries

The NIS directive in reality

To oblige- and benefit by the NIS-directive

The NIS-2 directive to improve the NIS directive

Identified weaknesses

Improvements through the NIS 2 Directive

The NIS2 Directive affects more entities

link22 and the NIS Directive

Read more

Related

Was the article valuable?

Sign up for our newsletter!

Do you want to know more?

Posts navigation