DaDesktop is developed and maintained entirely in-house by NobleProg Tech. Any issues are managed by our internal specialist team, including Security Ops, Developers, and DevOps personnel. Only NP Tech staff members have access to the core DaDesktop system.
NobleProg retains full rights to access, use, and modify all source code.
Redundancy and Failure recovery
Trainers and users have the option to replicate their entire real-time desktop environment using the 'remote replica' feature.
During experimentation, automatic snapshots of the desktop can be enabled. In the event of a crash, the system can restore the last functional version.
Servers are hosted in redundant data centres to ensure that if one facility fails, another available with low latency can seamlessly take over operations.
The DaDesktop infrastructure leverages a global network of data centres, each equipped with comprehensive physical and IT security policies.
DaDesktop utilizes QEMU/KVM to create and run virtual machines; both are native components of the Linux operating system. Because QEMU and KVM are built into the Linux OS, security updates are easy and quick to deploy without relying on third-party dependencies. QEMU/KVM boasts an excellent record in both security and performance, often surpassing commercial alternatives.
At NobleProg, a zero-trust policy is implemented
Access to NobleProg and DaDesktop systems is restricted to NP Tech staff users whose IP addresses are pre-registered. IP table firewall rules are applied to block unauthorized access to SSH and other ports.
Each system is secured by Two-Factor Authentication and passwords. Consequently, an attacker who obtains only the password cannot gain access, as their IP would not be whitelisted and they would lack the required One-Time Password.
In DaDesktop courses, each desktop network is isolated from other desktops and public access points.
All NobleProg staff use a MFA system to log in to NobleProg or DaDesktop systems. Access rights are revoked immediately upon an employee's departure to prevent unauthorized access.
Linux Hardening
The DaDesktop server (node) system is minimized by installing only essential packages on a custom, stripped-down version of Ubuntu that we develop and operate. This approach reduces complexity and overhead, leading to fewer security holes due to a reduced number of running services. The installed base is typically only 250MB per DaDesktop server node.
Access to the 'root' account via SSH is disabled.
The DaDesktop infrastructure is based on the latest stable version of Ubuntu Linux, which is automatically upgraded and patched to mitigate the risk of zero-day vulnerabilities.
Servers are continuously monitored for known vulnerabilities.
Unused packages and files are removed to maintain system efficiency and security.
NobleProg has access to all source code used in the project. If a vulnerability is discovered and a patch is not yet available, the NobleProg security team can implement a fix immediately.
Systems are kept up-to-date automatically via unattended-upgrades.
All connections from our servers to the dark web are monitored and can be automatically blocked.
Monitoring
NobleProg monitors all its servers, including DaDesktop servers, and generates alerts for any issues requiring attention. These alerts are tracked and resolved. Regular reviews of alerts and issues are conducted to ensure each concern is fully addressed, preventing recurrence.
CPU, memory, and network activity are monitored on all DaDesktop servers and trainer/participant machines. Additionally, all DaDesktop nodes and the underlying system are checked for any CVEs, which trigger flags in the monitoring system for review. Security updates are normally applied automatically, but any exceptions are patched manually or addressed with other mitigating measures.
Automatic recordings are captured on Fresh Start machines during courses, allowing Trainers to verify setups before launching. Optional recordings of the Trainer machine and Training Room can also be enabled during a course. This feature is fully controllable via the UI and can be disabled if not required.
DaDesktop Operating System Templates are updated every few weeks to include the latest security updates.