Security Tools for LabVIEW - TSS Oct 2024

[SumRunner]

Tim Cannon at RAM Aviation, Space, and Defense has created a valuable suite of tools for secure development in LabVIEW. Even better, Tim open-sourced these tools so that they are available for your use or collaboration. You can find the tools here: 

Timothy Cannon · GitLab

Tim's tools include: TLS, DTLS, Service Manager, File Integrity Manager, Secret Store API, Keeper API, Bouncy Castle API, LDAP API, IP Tables Wizard, File Transferer, RT SSH API, FGPA Flash Clearer, cRIO Sanitizer, Event Log Viewer, LabSNIFFER, Syslog API, Virus Total API, SBOM generator, Static Security Tester, Caraya wrapper,  and LabUPDATER. All of these tools help you meet CMMC/NIST 800-171 requirements. 

Recorded Presentation here: New Tools for Secure LabVIEW code Development

[cannoncontrols]

For anyone interested in these tools or cybersecurity in general, I recently started a YouTube channel focused on LabVIEW. I am doing a mix of content from LabVIEW fundamentals, to hardware demos but also want to do a big focus on cybersecurity. 

I am planning to walk through each of these tools in more detail here along with some more demos of the software in action. I also am creating a series where I walk through each control family of NIST 800-171 and discuss the impacts of these on a LabVIEW developer and what tools/best practices are available to help navigate these requirements. 

I am still just getting started creating/uploading content so there isn't a ton yet but more will be available shortly. Also, I'm still learning how to record and edit these videos effectively so quality isn't amazing but is getting better each video.

If anyone is interested the link to the channel is https://www.youtube.com/@cannoncontrols

[perj]

A really nice collection of tools, but I'm not able to find DTLS API? Is it not published on GitLab since it is in pre-release stage?

[Cannon_Controls]

Yeah, I haven't quite made it public yet as it's mostly done but not quite finished. I've been sidetracked with a few other projects but I'll take this inquiry as the motivation to get the initial release across the finish line shortly. I will let you know as soon as it's ready.