Astra entrusted authentication in services and infrastructure to the solution of Aladdin R.D.

2023: Implementing a Comprehensive Authentication Solution

On June 27, 2023, Aladdin R.D. announced that that as part of the implementation of a set of measures to strengthen the security of the development of products of the Astra Group ecosystem and to protect against unauthorized access to the company's systems, the Quality and Information Security Directorate completed test tests and began the active part of introducing a comprehensive authentication solution from Aladdin RD into the IT infrastructure of Astra Group..

The solution "Aladdin R.D." will be used for authentication in corporate systems of Astra Group. The use of the solution will allow employees to safely access the company's information systems and services.

Astra Group of Companies is the manufacturer of the protected OCAstra Linux Special Edition, which includes special and effective SMTs. In modern realities, compromising the OS and company products is a desirable goal for cybercriminals. Hackers use complex penetration scenarios. However, when applying an authentication solution from Aladdin R.D. in conjunction with the IPS of our Astra Linux OS, it is possible to strengthen the protection of the perimeter of the company's IT infrastructure from external threats and unauthorized access using devices or employee accounts, - said Maxim Fokin, Director of Information Security of Astra Group of Companies.

The solution "Aladdin R.D." consists of two parts: server and client. The server part is represented by the JaCarta Authentication Server product, which supports two-factor authentication using hardware and software tokens, which allows information security specialists to use different authentication formats in the future. The server is adapted for high performance (more than 5,000 authentications per second), which will avoid failures in the peak morning hours.

Support for a large number of standard protocols (RADIUS, REST, WCF, ADFC) contributes to the simple integration of the server with the application work software used by employees of various departments. Full compatibility with current versions of ALD Pro and Astra Linux Special Edition makes it easier for the company's system administrators to massively implement two-factor authentication among users.

About 1,500 employees with different levels of access work in the structural divisions of the Astra group of companies. A fully functional office for specialists of the information security department of the company will allow you to independently produce and fine-tune unique authenticators depending on the role of the employee in the organization and the level of access.

The client part of the solution is represented by the Aladdin 2FA mobile application (authentication software), which allows you to generate one-time passwords (OTP), and also supports the PUSH mechanism. Aladdin 2FA implements the function of securely transmitting the user authenticator at the registration stage, which makes it impossible to intercept or clone the OTP or PUSH authenticator.

Sharing Aladdin 2FA with JAS gives you complete control over any authorization attempt on the company's systems.

Astra Group of Companies and Aladdin R.D. have been technological partners for a long time. During the collaboration, many product compatibility certificates were issued for various OS versions. The trust in our product is not only the logical results of the partnership, but also a vivid example of the recognition of our expertise by colleagues who, like us, have been developing domestic cryptography for many years, "commented Sergey Chelyshev, head of integration with technological partners" Aladdin R.D. "