Security

Ownership & Control

• DaDesktop is built by NobleProg Tech and handled completely in-house. Our dedicated team of Security Operations, Developers, and DevOps specialists resolves any issues. Access to the core DaDesktop system is restricted solely to NP Tech personnel.
• NobleProg possesses full access and rights to use and modify all source code.

Redundancy & Failure Recovery

1. Both trainers and users can replicate the entire desktop in real time using the remote replica option.
2. During experimentation, automatic snapshots of a desktop can be turned on. If a crash occurs, the system restores the most recent working state.
3. Servers are hosted in redundant data centers; if one center fails, another is immediately available with minimal latency.
4. The DaDesktop infrastructure leverages multiple data centers around the globe, all protected by rigorous physical and digital security measures.
5. DaDesktop relies on QEMU/KVM to create and manage virtual machines; both are integral components of the Linux OS. Because they’re baked into Linux, deploying security updates is straightforward and fast, with no dependence on third parties. QEMU/KVM boasts a top-tier track record in both security and performance, often outperforming commercial alternatives.

Zero-Trust Policy at NobleProg

1. Only NP Tech staff with pre-registered IP addresses are permitted to access NobleProg and DaDesktop systems. IP tables firewall rules block SSH and other ports from unauthorized connections.
2. Every system is secured with both a password and two-factor authentication. An attacker with just the password can’t log in — their IP won’t be whitelisted, and they’d still lack the one-time password.
3. During a DaDesktop course, each desktop network is isolated from others and from public access.
4. All NobleProg staff members use multi-factor authentication to log into NobleProg or DaDesktop systems. When someone leaves, their access is revoked instantly to prevent any unauthorized entry.

Hardening Linux

1. DaDesktop server nodes are stripped down to the essentials by installing only necessary packages — a custom, minimal Ubuntu build we maintain. This reduces complexity, trims overhead, and shrinks the attack surface, with fewer packages and services running at any given moment. Each node’s base installation is typically just 250 MB.
2. Root account access via SSH is disabled.
3. The DaDesktop infrastructure runs on the latest stable Ubuntu LTS releases and applies automatic upgrades and patches, minimizing the chance of zero-day exploits.
4. Servers are continuously scanned for known vulnerabilities.
5. Unused packages and files are regularly purged.
6. NobleProg has access to all source code. If a vulnerability appears with no official patch yet, our security team can apply a fix right away.
7. Systems receive automatic updates via unattended-upgrades.
8. All outbound connections from our servers to the dark web are monitored and can be blocked automatically.

Monitoring

1. NobleProg monitors all servers, including DaDesktop, and generates alerts for any problems requiring attention. These alerts are promptly investigated and resolved. We conduct regular reviews of past alerts and issues to fully prevent recurrence.
2. We track CPU, memory, and network activity across all DaDesktop servers and trainer/participant machines. Moreover, every DaDesktop node and the core system is watched for CVEs, which trigger flags for inspection. Security patches usually apply automatically; if an exception is spotted, we patch manually or take other mitigation steps.
3. Recordings are automatically created for Fresh Start machines in courses, allowing trainers to review course preparations for any issues. Optionally, recordings can also cover the trainer’s machine and the training room during a session. This is fully configurable via the UI and can be turned off when not needed.
4. DaDesktop OS templates are typically refreshed every two weeks with the most recent security patches.