| LynuxWorks touts, teaches secure Linux solutions at ESC |
Sep. 13, 2005
LynuxWorks will demonstrate secure embedded Linux implementations, and teach courses in embedded security, at ESC in Boston this week. The company says its LynxSecure Separation Kernel can run embedded OSes like Linux in supervised user-space partitions, and was designed for EAL-7 certification -- the highest level of embedded security possible.
LynuxWorks shipped its LynxSecure separation kernel in March, saying the minimalist supervisor kernel could run other more featureful OSes -- including the company's BlueCat embedded Linux-- within secure, supervised user-space partitions.
LynxSecure runs Linux in a supervised user-space partition
LynuxWorks says LynxSecure was designed to meet the requirements of EAL-7, the highest level of the Common Critera, a system of ranking system security. Certification to EAL-7 dictates that a software product has been formally verified, designed, and tested. LynuxWorks designed LynxSecure in concert with the NSA (National Security Agency) and others. The product aims to eliminate time-consuming, costly system evaluation processes currently associated with government and military OS deployments.
LynuxWorks says LynxSecure can run on servers, workstations, or embedded systems, including avionics products, weapons systems, C4ISR (command, control, communications, computers, intelligence, surveillance, and reconnaissance) data systems, and critical infrastructure contol systems. The technology fosters software reuse by enabling "any existing Linux or POSIX software applications," including BlueCat Linux and LynxOS-178 applications, to be run securely within LynxSecure partitions, the company says.
A somewhat similar product, "Padded Cell technology," is available from long-time open source detractor Green Hills Software. LynuxWorks actually pre-announced its "separation kernel" technology in April of 2004, in direct response to what it called "FUD" from GHS CEO Dan O'Dowd about the alleged insuitability of Linux for secure military applications.
Despite waves of anti-Linux PR from Green Hills, US defense agencies increasingly base new development efforts on Linux and other open source software, and LynuxWorks credited Linux binary compatibility with helping its LynxOS-178 to win the selection battle for the US government's massive $145B to $200B Future Combat Systems program.
LynuxWorks says its ESC demonstrations will include safety-critical DO-178B applications running on the IA-32 architecture, as well as demonstrations of products including LynxSecure, LynxOS-178, LynxOS v4.0, and BlueCat Linux v5.1. Together, these products can deliver the "Multi Level Security" (MLS) increasingly mandated by defense systems handling data of varying levels of classification, the company says. MLS requirements are also increasing due to the trend toward Network Centric Warfare (NCW), and by the increasing interconnection of defense systems to a Global Information Grid (GIG), LynuxWorks says. Additionally, MLS is increasingly needed in financial networks, national infrastructure, and other commercial systems, the company says.
Embedded security classes
LynuxWorks's senior systems engineer, Paul Farmer, taught a course today at the Embedded Systems Conference (ESC) from 8:30 to 10 AM, covering topics such as network security protocols (and when and where they are used), the software and hardware requirements for implementation, network protocol vulnerabilities, embedded system designs, and the benefits of open source.
Arun Subbarao, director of technology and product development for LynuxWorks, will teach a course from 3:30 to 5 PM today on "Designing FIPS 140 Compliance into Embedded Systems."
CEO Inder Singh said, "From our FCS (Future Combat System) win to shipping our new, breakthrough products like LynxSecure, we really have had an incredible year."
Related Stories:
(Click here for further information)
|
|
|
7 Advantages of D2D Backup
For decades, tape has been the backup medium of choice. But, now, disk-to-disk (D2D) backup is gaining in favor. Learn why you should make the move in this whitepaper.
4 Legal Reasons to Control Internet Access
The Internet is obviously a valuable resource for many organizations. However, many are exposed to legal liability concerns because they fail to control Internet access. Learn if you're safe in this white paper.
Rapidly Resolve J2EE Application Problems
Whether you are in the process of building J2EE applications or have J2EE applications already running in production, you must ensure that they deliver the expected ROI. Learn how in this white paper.
Load Testing 2.0 for Web 2.0
There are many unknowns in stress testing Web 2.0 applications. Find out how to test the performance of Web 2.0 in this white paper.
Build Better Games Online
For the game infrastructure providers, life is complex. Making money from games has become more complicated. Why? Find out in this white paper.
Building a Virtual Infrastructure from Servers to Storage
This white paper discusses the virtual storage solutions that reduce cost, increase storage utilization, and address the challenges of backing up and restoring Server environments.
Gaining Faster Wireless Connections with WiMAX
Welcome to what is quickly becoming the hyperconnected world where anything that would benefit from being connected to the network will be connected. Learn more in this white paper.
Is Your Desktop a Security Threat?
The new wave of sophisticated crimeware not only targets specific companies, but also targets desktops and laptops as backdoor entryways into those business’ operations and resources. Learn how to stay safe in this white paper.
Increasing SAN Reliability by 100 Percent
Storage area networks (SAN) are a strong part of storage plans. Learn how to increase your reliability and uptime by 100 percent in this case study.
|
|
|
|
|
news feed