DaDesktop is developed and maintained entirely in-house by NobleProg Tech. All issues are handled by our dedicated internal team comprising Security Operations, Developers, and DevOps specialists. Exclusive access to the underlying DaDesktop system is restricted to NP Tech personnel.
NobleProg holds full access and rights to utilize and modify all source code.
Redundancy and Failure Recovery
Trainers and users have the option to replicate their entire desktop in real time via the 'remote replica' feature.
During experimentation, automatic snapshots of the desktop can be enabled, allowing the system to restore the last working version in the event of a crash.
Servers are hosted in redundant data centers; if one data center experiences a failure, another is available at a low-latency distance to ensure continuity.
The DaDesktop infrastructure utilizes multiple data centers located worldwide, all governed by comprehensive physical and IT security policies.
DaDesktop leverages QEMU/KVM to create and run virtual machines, both of which are integral components of the Linux operating system. This native integration eliminates third-party dependencies, enabling rapid and straightforward security updates. QEMU/KVM boasts an excellent record for security and performance, often surpassing commercial alternatives.
At NobleProg, a Zero-Trust Policy Is Implemented
Access to NobleProg and DaDesktop systems is strictly limited to NP Tech staff with pre-registered IP addresses. Firewall rules based on IP tables are enforced to block SSH and other unauthorized port access.
Every system is secured with Two-Factor Authentication and password protection. An attacker possessing only a password cannot gain access, as their IP address would not be whitelisted and they would lack the required One-Time Password.
In DaDesktop courses, each desktop's network is isolated from other desktops and public access to prevent cross-contamination.
All NobleProg staff utilize a Multi-Factor Authentication (MFA) system to log in to NobleProg or DaDesktop systems. Access is immediately revoked upon an employee's departure to safeguard against unauthorized entry.
Linux Hardening
The DaDesktop server (node) system is optimized by installing only essential packages on a custom, stripped-down version of Ubuntu that we build and operate. This minimizes complexity and overhead, resulting in fewer running services and a reduced attack surface. The installed base typically amounts to only 250MB per DaDesktop server node.
Direct access to the 'root' account via SSH is disabled.
The DaDesktop infrastructure is built on the latest stable version of Ubuntu Linux, with automatic upgrades and patching to mitigate the risk of zero-day vulnerabilities.
Servers are continuously monitored for known vulnerabilities.
Unused packages and files are regularly removed to maintain system integrity.
NobleProg maintains access to all project source code. If a vulnerability is discovered and an official patch is unavailable, our security team can develop and deploy a custom patch immediately.
Systems receive automatic updates via unattended-upgrades.
All connections from our servers to the dark web are monitored and can be automatically blocked.
Monitoring
NobleProg monitors all servers, including DaDesktop infrastructure, generating alerts for any issues requiring attention. These alerts are actively followed up and resolved. Regular reviews of alerts and issues are conducted to ensure root causes are addressed and prevent recurrence.
We monitor CPU, memory, and network activity across all DaDesktop servers and trainer/participant machines. Additionally, all DaDesktop nodes and the underlying system are scanned for CVEs, which trigger flags in the monitoring system for review. While security updates are typically applied automatically, any exceptions identified are manually patched or mitigated as necessary.
Automatic recordings are captured from Fresh Start machines during courses, allowing trainers to verify content before preparation. Optional recordings of the Trainer machine and Training Room can be made during sessions; this feature is fully controllable via the UI and can be disabled if not required.
DaDesktop Operating System Templates are updated approximately every few weeks to incorporate the latest security patches.