SecureOL VE2 Security Software 

A security software for Windows machines that creates two virtual environments, secure and public, thereby preventing security threats from the Internet to affect the enterprise network

The VE2 (actually VE squared) is a fairly interesting

virtualization software for Windows machines in an office, be they desktops or

notebooks. Unlike the usual virtualization environments, which allow you to load

multiple OSs on the same hardware, this one creates two virtual environments in

your existing OS-Public and Secure. The Public environment is unsecure and

used to connect to the Internet, which is an unsecure network. The user browse

the Web or chat in this environment, but can't access the enterprise network.

The secure environment, on the other hand, doesn't allow Internet

connectivity, but lets the user connect to the local network resources. Since

most security threats come in through the Internet nowadays, the software

completely isolates the secure environment from them. This can be a boon for an

enterprise network. While users are given free access to the Internet, the IT

department need not worry about any security threats coming into the main

network.

We ran a slew of tests on SecureOL, and the way it works is

quite interesting. Installing it was a breeze. It automatically detected all the

network interfaces and firewall settings on our test notebook. It then scanned

through the entire hard drive's directory structure and on its own decided

which ones to keep in the secure environment and which ones in the public one.

After that, it also let the user add any other directories it had left out to

the secure environment. The machine was ready for action after a system restart.

At first glance, we didn't find anything different about the machine, barring

the 'protected by SecureOL' logo that appeared on the login screen, and the

usual desktop shortcuts and entries it created in Program Files. Both

environments look exactly the same with all the files in their original places.

There was a small icon in the system tray that indicated whether we were in the

secure or public environment. Double clicking on this icon switched the

environments and a big caption saying 'SECURE' or 'PUBLIC' appeared on

the screen for a few seconds. The difference became apparent when we noticed

that the title bar in all the windows we opened had changed colors. In secure

mode, all the bars were red, while in public mode, they were blue. After that of

course, we started finding the differences. New files created in secure

environment have a small red dot on the file names. If you open a file in the

secure environment, and switch to the public one, you won't find the file open

there, indicating that there are indeed two virtual environments running. 

No matter what goes wrong in the public environment, you can always restore it to its original state

One good thing about this package is that while regular

virtualization software consume a lot of system resources, this one hardly

affected our machine. Switching between environments happens instantly, and

there's hardly any performance degradation while doing any work.

The tests



Our test machine had Win XP Pro running with both Ethernet and WiFi. We had

turned WiFi off during installation. After the installation, we could access

only the local network resources, but couldn't browse or chat on Yahoo IM.

While in public mode, we could do the reverse. It wouldn't let us access the

network resources, but did let us browse and chat. However, we were able to

download mail from our corporate mail server over the Internet in both modes.

It seemed to have created two instances of our mailbox.

Accoring to us, users should not be allowed to access corporate mail from the

public environment since it would add to confusion when some mails land up in

one environment's mailbox while rest in the other. Coming to the security

part, there's nothing much you can do to harm the machine when SecureOL is

running. If you Shift+Delete a file, it comes right back after a folder refresh.

If you send it to the Recycle Bin, it will create another copy of it in the same

folder. The same thing happened when we moved files from one folder to another.

All this happens to the files that existed before SecureOL was installed. Any

fresh files you create after its installation can be moved or deleted. We found

this to happen in both secure as well as public mode. If you do want to move or

delete certain pre-SecureOL files, or install an application that should be

available across both environments, then you have to enter a special update

mode. This requires a system restart, which consumes extra time. In update mode,

SecureOL only provides a single environment. Other than access the Internet, you

don't have much in the public domain. Even a system restart is only possible

from the secure domain. The really good thing about the public environment is

that you can do anything you want in it. You can add files, delete them, make

modifications, etc. None of this is going to harm the system. The moment you

feel that a virus has struck and harmed the system, run a cleanup. It restarts

the system, after which everything is restored back to default settings.

We also tried to connect to the Internet from the secure

environment by connecting a Reliance phone to it. The connectivity software ran

fine and even showed that it was connected to the Internet. However, it didn't

let us browse the Web. The public environment didn't even allow us to connect

at all. There are tons of other features in this software, like the ability to

control the I/O devices that can be used in the public environment. You can

install the software on multiple machines and control them centrally. It'll

let you apply policies, change firewall rules, terminate or run specific

processes remotely, and more.

Bottom Line: Overall, it's a fairly interesting security

concept for enterprises. In order for this software to be deployed

successfully, the organization must update and strengthen its internal

security policies, which is a major challenge as there are organizations that

don't even update their anti-virus definitions regularly.

So even if the s/w is installed, and a malicious program

enters the secure network, it defeats the purpose of setting it up. The good

thing is that you can apply maximum security to the secure environment and leave

the public environment completely unsecured. A lite version is available for

home use also.

Anil Chopra