Owl PaciT®

Analyze Network Traffic in Real-Time

In critical infrastructure plant operations, the collection of network data usually requires secure transfer to an analysis center for review and long-term storage.

In these cases, a reliable and accredited cybersecurity solution must be utilized to ensure a secure one-way data transfer across network boundaries.

Owl PaciT® is a two-server, enterprise solution, using a dedicated send-only server and a dedicated destination-only server. The servers are connected by Owl’s proprietary data diode hardware to create a deterministic one-way only data transfer path.

Operating System and System Administration

The security imposed by Owl PaciT® is only as rigorous as the environment in which the solution operates, and the controls placed on those administrators given privileged access to the solution’s operation. The architecture of Owl PaciT® enables secure defense-in-depth, and provides the customer a component of an overall IT/OT defense-in-depth strategy.

Owl PaciT® performs its functions in a hardened Linux OS — Owl Security Enhanced Linux (OSEL). The OSEL profile applies explicit constraints and limits on what tasks the operating system can perform, and on what functions software applications (including Owl proxy applications) can deliver. Activities in violation of these constraints/limits are prohibited. Applications attempting to act outside defined, specific, functions are disabled. Network security is maintained. Access levels to Owl PaciT® administration are explicitly defined, as well. Owl and the customer operator define privileged administrator profiles and their levels (or roles) of permitted functional activity. Owl PaciT® enforces user-case defined Owl Role-based Access Controls (RBAC).