LynuxWorks will demonstrate secure embedded Linux implementations, and teach courses in embedded security, at ESC in Boston this week. The company says its LynxSecure Separation Kernel can run embedded OSes like Linux in supervised user-space partitions, and was designed for EAL-7 certification — the highest level of embedded security possible.

LynuxWorks shipped its LynxSecure separation kernel in March, saying the minimalist supervisor kernel could run other more featureful OSes — including the company's BlueCat embedded Linux– within secure, supervised user-space partitions.

LynxSecure runs Linux in a supervised user-space partition
LynuxWorks says LynxSecure was designed to meet the requirements of EAL-7, the highest level of the Common Critera, a system of ranking system security. Certification to EAL-7 dictates that a software product has been formally verified, designed, and tested. LynuxWorks designed LynxSecure in concert with the NSA (National Security Agency) and others. The product aims to eliminate time-consuming, costly system evaluation processes currently associated with government and military OS deployments.

LynuxWorks says LynxSecure can run on servers, workstations, or embedded systems, including avionics products, weapons systems, C4ISR (command, control, communications, computers, intelligence, surveillance, and reconnaissance) data systems, and critical infrastructure contol systems. The technology fosters software reuse by enabling “any existing Linux or POSIX software applications,” including BlueCat Linux and LynxOS-178 applications, to be run securely within LynxSecure partitions, the company says.

A somewhat similar product, “Padded Cell technology,” is available from long-time open source detractor Green Hills Software. LynuxWorks actually pre-announced its “separation kernel” technology in April of 2004, in direct response to what it called “FUD” from GHS CEO Dan O'Dowd about the alleged insuitability of Linux for secure military applications.

Despite waves of anti-Linux PR from Green Hills, US defense agencies increasingly base new development efforts on Linux and other open source software, and LynuxWorks credited Linux binary compatibility with helping its LynxOS-178 to win the selection battle for the US government's massive $145B to $200B Future Combat Systems program.

LynuxWorks says its ESC demonstrations will include safety-critical DO-178B applications running on the IA-32 architecture, as well as demonstrations of products including LynxSecure, LynxOS-178, LynxOS v4.0, and BlueCat Linux v5.1. Together, these products can deliver the “Multi Level Security” (MLS) increasingly mandated by defense systems handling data of varying levels of classification, the company says. MLS requirements are also increasing due to the trend toward Network Centric Warfare (NCW), and by the increasing interconnection of defense systems to a Global Information Grid (GIG), LynuxWorks says. Additionally, MLS is increasingly needed in financial networks, national infrastructure, and other commercial systems, the company says.

Embedded security classes

LynuxWorks's senior systems engineer, Paul Farmer, taught a course today at the Embedded Systems Conference (ESC) from 8:30 to 10 AM, covering topics such as network security protocols (and when and where they are used), the software and hardware requirements for implementation, network protocol vulnerabilities, embedded system designs, and the benefits of open source.

Arun Subbarao, director of technology and product development for LynuxWorks, will teach a course from 3:30 to 5 PM today on “Designing FIPS 140 Compliance into Embedded Systems.”

CEO Inder Singh said, “From our FCS (Future Combat System) win to shipping our new, breakthrough products like LynxSecure, we really have had an incredible year.”

---

 
This article was originally published on LinuxDevices.com and has been donated to the open source community by QuinStreet Inc. Please visit LinuxToday.com for up-to-date news and articles about Linux and open source.