Security

DaDesktop is developed and maintained entirely in-house by NobleProg Tech. Any issues are addressed by their dedicated team of Security Ops, Developers, and DevOps specialists, ensuring that only NP Tech personnel have access to the underlying DaDesktop system.
NobleProg retains full rights and access to use and modify all source code.

Trainers and users have the option to replicate the entire desktop in real time using the 'remote replica' feature.
When experimenting, users can enable automatic snapshots. In the event of a crash, the system is capable of restoring the last stable working version.
Servers are hosted in redundant data centres; if one data centre fails, another is available within a low-latency distance to ensure continuity.
The DaDesktop infrastructure utilizes a global network of data centres, all protected by comprehensive physical and IT security policies.
DaDesktop employs QEMU/KVM to create and run virtual machines, both of which are integral parts of the Linux operating system. Since QEMU and KVM are built-in components of Linux, security updates can be deployed quickly and easily without reliance on third parties. QEMU/KVM boasts an excellent record for security and performance, often surpassing commercial alternatives.

Access to NobleProg and DaDesktop systems is restricted to NP Tech staff with pre-registered IP addresses. IP table firewall rules are enforced to block unauthorized access via SSH and other ports.
Every system is secured by Two-Factor Authentication and password protection. An attacker possessing only the password cannot gain access, as their IP address would not be whitelisted and they would lack the required One-Time Password.
In a DaDesktop course environment, each desktop network is isolated from other desktops and public internet access.
All NobleProg staff use MFA to log in to NobleProg or DaDesktop systems. Access privileges are revoked immediately upon an employee’s departure to safeguard against unauthorized access.

The DaDesktop server system is minimized by running a custom, stripped-down version of Ubuntu. This approach reduces complexity and overhead, leading to fewer security vulnerabilities due to the limited number of running packages and services. Typically, the installed base on each DaDesktop server node is only 250MB.
Access to the 'root' account via SSH is disabled.
The infrastructure is built on the latest stable version of Ubuntu Linux, which is automatically upgraded and patched to mitigate the risk of zero-day vulnerabilities.
Servers are continuously monitored for known vulnerabilities.
Unused packages and files are regularly removed to maintain system efficiency.
NobleProg retains access to all project source code. In the event that a vulnerability is discovered and no patch is available, the NobleProg security team can implement an immediate fix.
Systems are kept current through automatic updates (unattended-upgrades).
Any connections from servers to the dark web are monitored and can be automatically blocked.

NobleProg monitors all its servers, including DaDesktop instances, generating alerts for any issues requiring attention. These alerts are tracked, resolved, and regularly reviewed to prevent recurrence.
CPU, memory, and network activity are monitored across all DaDesktop servers and trainer/participant machines. Additionally, DaDesktop nodes are scanned for CVEs, which trigger flags in the monitoring system for review. While security updates are usually applied automatically, any exceptions are patched manually or addressed with other mitigating measures.
Recordings are automatically captured from Fresh Start machines to help Trainers verify course preparation. Optionally, recordings of the Trainer machine and Training Room can be enabled during a course. This feature is fully controllable via the UI and can be disabled if not required.
DaDesktop Operating System Templates are typically updated every few weeks to incorporate the latest security patches.