Advertisement
Product Releases
Advertisement

System Achieves Rare Security Certification

Fri, 01/30/2009 - 9:06am
Green Hills Software, Inc.'s INTEGRITY®-178B operating system has been certified by the National Information Assurance Partnership to Common Criteria Evaluation Assurance Level (EAL) 6+, High Robustness.

This certification is the highest Common Criteria security level ever achieved for an operating system. Only an EAL6+ High Robustness operating system is certified to protect classified information and other high value resources at risk of attack from hostile and well-funded attackers attempts to breach the system security.

INTEGRITY-178B was certified against the Common Criteria's SKPP, whose High Robustness designation represents the gold standard for operating system security certification, requiring "security services and mechanisms that provide the most stringent protection and rigorous security countermeasures." The security gap between EAL4+-certified products and SKPP-certified products is immense — while EAL4+ does not even require examination of the product source code, SKPP requirements include the use of formal methods to mathematically prove the security policies, formal specifications, formal correspondence between design and implementation, complete test coverage of all functional requirements, and penetration testing by the NSA, which has complete access to the source code.

Recognizing High Assurance software processes and standards as a mandatory requirement for embedded and enterprise computing systems around the world, a large team of internal Green Hills Software experts began work in 1999 on compliance with some of the world's most demanding software assurance standards.

With its open standards, POSIX-conformant interface and ability to host arbitrary general purpose operating systems, such as Windows and Linux, in virtual machines, INTEGRITY can run more application software than any other operating platform, while maintaining a very high level of security for critical components, algorithms, applications, and subsystems. INTEGRITY enables solutions to many of the world's long-standing computer security problems, including safe Internet browsing on corporate PCs; protection of critical enterprise servers; unhackable digital rights management (DRM); and multi-level security for government laptops, desktops, PDAs, and servers.

"The certification is a landmark in the security world," commented Dan O'Dowd, founder and chief executive officer, Green Hills Software. "INTEGRITY is the only solution to the long-unsolved problems of protecting the world's critical infrastructure, keeping private information private, and thwarting even the most determined cyber attackers."

The INTEGRITY operating system's pedigree also includes certification and compliance with other demanding government and industry software reliability standards including:
  • RTCA/DO-178B Level A, the highest level of avionics safety certification granted by the Federal Aviation Administration and the European Aviation Safety Agency
  • FDA Class III, the most life critical medical devices approved by the Food and Drug Administration
  • IEC 61508 SIL 3, the highest level industrial safety certification granted to an operating system by TÜV.

Advertisement

Share this Story

X
You may login with either your assigned username or your e-mail address.
The password field is case sensitive.
Loading