The name of the base system (platform): | Microsoft SQL Server |
Developers: | Microsoft |
Technology: | DBMS |
The Microsoft company and Federal State Unitary Enterprise STC Atlas announced in April, 2011 that Microsoft SQL Server 2008 database management system (DMS) together with the Russian information security tools is certified by FSB of Russia on classes AK2/AK3.
This certificate (No. Federation Council/112-1592) means that the solution of Microsoft used together with the Russian information security tools conforms to requirements of FSB of Russia for protection of the automated information systems (AIS) against unauthorized access for classes AK2/AK3 and can be operated in the AIS, processing information of limited distribution (confidential information) which is not containing the data which are the state secret. This certificate is received based on the certified researches conducted by Federal State Unitary Enterprise STC Atlas.
Certification of SQL Server of 2008 was a necessary link in certification of a complex of the products of Microsoft intended for joint work. Before the conclusion and certificates on compliance to requirements of FSB of Russia to automated information systems on classes AK2 and AK3 the server operating system (OS) of Microsoft Windows Server 2003 and client Windows XP OS with the packets of Secure Pack Rus and CryptoPro CSP set on them providing protection against unauthorized access and implementation of the Russian cryptographic algorithms received. Thus, public authorities of the Russian Federation received the functional, protected and conforming to requirements of the legislation DBMS which, in particular, is Basic Element for creation of a system of the protected document flow based on solutions of Microsoft.
Feature of the certified Microsoft platform is the security not only from external unauthorized access, but also from actions of the internal violator who is the registered user of an information system.
In 2002 Microsoft developed the Government Security Program (GSP) program within which access to source codes of products of Microsoft is provided to the organizations participating in the state projects on improvement of secure information systems. Russia is the first country in the world where the agreement of GSP is signed. This Agreement was signed in 2002 between Microsoft corporation and Federal State Unitary Enterprise STC Atlas and approved with FAGCI. After conversion of FAGCI the Agreement was re-signed with Federal State Unitary Enterprise STC Atlas and approved with FSB of Russia. The agreement works and till present. According to Soglasheniy access to source codes of products of Microsoft is got not only by FSB, but also FSTEC, the Ministry of Defence, and other organizations working in the state projects on improvement of secure information systems.