Cybersecurity

SEAPATH follows the applicable cybersecurity guidelines defined by the ANSSI in the ANSSI-BP-028v2.0 document. Several mechanisms have been considered to guarantee the system security:

• System hardening

• Disk encryption

• Secrets storage and protection

• Process isolation

• Privileges management policy

• Connection encryption

On the next page is the list of the ANSSI-BP-028 recommendations along with their status on SEAPATH and an explanation of the work done or to be done.

TODO

• Explain how to generate SBOM on SEAPATH

• Explain secure boot support

• Explain Debian hardening process