DaDesktop is developed and maintained entirely in-house by NobleProg Tech. All concerns are managed by our dedicated internal teams of Security Ops, Developers, and DevOps staff. Exclusive access to the underlying DaDesktop system is reserved for NP Tech personnel.
NobleProg retains full rights to access, utilize, and modify all source code.
Redundancy and Failure Recovery
Trainers and users have the option to replicate their entire desktop in real-time using the 'remote replica' feature.
During experimental sessions, automatic snapshots can be enabled to capture the desktop state. In the event of a crash, the system can restore the last known working version.
Servers are housed in redundant data centers. Should one data center fail, operations continue seamlessly through another data center located at a low-latency distance.
The DaDesktop infrastructure leverages data centers located globally, all operating under comprehensive physical and IT security policies.
DaDesktop utilizes QEMU/KVM to create and run virtual machines; both are integral components of the Linux operating system. Since QEMU and KVM are built into the Linux OS, security updates can be deployed rapidly and easily without reliance on third-party vendors. QEMU/KVM boasts an excellent security and performance track record, often surpassing that of commercial alternatives.
At NobleProg, a zero-trust policy is implemented
Access to NobleProg and DaDesktop systems is restricted to NP Tech staff whose IP addresses are pre-registered. Firewall rules (IP tables) are enforced to secure SSH and other ports against unauthorized access.
Every system is protected by Two-Factor Authentication and password requirements. Consequently, an attacker who obtains only a password cannot access the system, as their IP would not be whitelisted and they would lack the required One-Time Password.
On DaDesktop courses, each desktop's network is isolated from other desktops and public internet access.
All NobleProg staff must use a Multi-Factor Authentication (MFA) system to log in to NobleProg or DaDesktop systems. Access is immediately revoked when a staff member leaves to prevent unauthorized access.
Linux Hardening
The DaDesktop server (node) system is minimized by installing only essential packages onto a custom, streamlined version of Ubuntu that we build and operate. This approach reduces complexity and overhead, resulting in fewer security vulnerabilities and fewer active services. The installed base typically occupies only 250MB per DaDesktop server node.
Access to the 'root' account via SSH is disabled.
The DaDesktop infrastructure is based on the latest stable version of Ubuntu Linux, with automatic upgrades and patching to mitigate the risk of zero-day vulnerabilities.
Servers are continuously monitored for known vulnerabilities.
Unused packages and files are removed to maintain system integrity.
NobleProg has access to all source code used in the project. If a vulnerability is discovered for which a patch is not yet available, the NobleProg security team can apply a patch immediately.
Systems are automatically updated via unattended-upgrades.
All connections from our servers to the dark web are monitored and can be automatically blocked.
Monitoring
NobleProg monitors all servers, including DaDesktop nodes, generating alerts for any issues requiring attention. These alerts are actively followed up and resolved. Regular reviews of alerts and issues are conducted to ensure comprehensive remediation and to prevent recurrence.
We monitor all DaDesktop servers, along with trainer and participant machines, for CPU, memory, and network activity. Additionally, all DaDesktop nodes and the underlying system are monitored for CVEs, which trigger flags in the monitoring system for review. While security updates are typically applied automatically, any exceptions identified are manually patched, and other mitigating measures are implemented as necessary.
Recordings are automatically captured from Fresh Start machines during courses, allowing trainers to verify course preparation. Recordings of the Trainer machine and Training Room are optional and can be enabled or disabled via the UI as needed.
DaDesktop Operating System Templates are typically updated every few weeks to incorporate the latest security patches.