GHS has EAL6+ operating system security certification; launches Integrity Global Security

An operating system from Green Hills Software (GHS) was certified by the U.S. government to Common Criteria Evaluation Assurance Level (EAL) 6+, High Robustness. GHS formed a related security subsidiary.

11/26/2008



Integrity-178B operating system from Green Hills Software (GHS) has been certified by the National Information Assurance Partnership (NIAP), a U.S. government initiative operated by the National Security Agency (NSA), to Common Criteria Evaluation Assurance Level (EAL) 6+, High Robustness.

Santa Barbara, CA – Integrity-178B operating system from Green Hills Software (GHS) has been certified by the National Information Assurance Partnership (NIAP), a U.S. government initiative operated by the National Security Agency (NSA), to Common Criteria Evaluation Assurance Level (EAL) 6+, High Robustness. In related news, GHS formed Integrity Global Security LLC , a wholly owned subsidiary.
For more about security, read the Control Engineering blog:

Industrial Cyber Security

.
The certification, first of its kind, is the highest Common Criteria security level achieved for an operating system. Only an EAL6+ High Robustness operating system is certified to protect classified information and high-value resources at risk from hostile, well-funded attackers. The company claims that the highest security standard to which other operating systems are certified only protects against “inadvertent or casual attempts to breach the system security.”
Green Hill Software says the stringent EAL6+ NIAP/NSA certification process lists products that have begun a certification process. Common Criteria states “EAL4 is the highest level at which it is likely to be economically feasible to retrofit to an existing product line.” Integrity was designed for EAL7, the highest level of security, and thus was able to meet NSA high robustness requirements. Dan O’Dowd, GHS founder and CEO, called the certification a landmark in the security world.
Neil MacDonald, vice president and Gartner fellow, said, “For years, information security has been myopically protecting the organization from the outside in with technologies like firewalls and antivirus and largely overlooked the need to protect it from the inside out. In Gartner’s vision of Adaptive Security Infrastructure, protecting workloads and information from the inside out will require more intelligent security sensors throughout the infrastructure– at endpoints, virtual servers and within the applications and data themselves. However, security software running on the same physical machine as the workloads and information it is protecting can’t be unequivocally trusted without strong isolation, high assurance, and resiliency of the software, and trust attestation which will become the foundation for next-generation Adaptive Security Infrastructure.”
Integrity-178B was certified against the Common Criteria’s SKPP, whose high robustness designation represents the standard for operating system security certification, requiring “security services and mechanisms that provide the most stringent protection and rigorous security countermeasures.” The security gap between EAL4+-certified products and SKPP-certified products is described as immense: while EAL4+ does not require examination of the product source code, SKPP requirements include the use of formal methods to mathematically prove the security policies, formal specifications, formal correspondence between design and implementation, complete test coverage of all functional requirements, and penetration testing by the NSA, which has complete access to the source code.
Efforts to meet government functional and assurance objectives for security did not start with SKPP requirements. Recognizing high assurance software processes and standards as mandatory for embedded and enterprise computing systems around the world, a team of internal GHS experts began work in 1999 on compliance with demanding software assurance standards.
The operating system’s pedigree also includes certification and compliance with other demanding government and industry software reliability standards such as RTCA/DO-178B Level A, the highest level of avionics safety certification granted by the Federal Aviation Administration and the European Aviation Safety Agency; FDA Class III, the most life critical medical devices approved by the Food and Drug Administration; and IEC 61508 SIL 3, the highest level industrial safety certification granted to an operating system by TÜV
With its open standards, POSIX-conformant interface, and ability to host arbitrary general purpose operating systems, such as Windows and Linux, in virtual machines, Integrity can run more application software than any other operating platform, while maintaining the highest level of security for critical components, algorithms, applications, and subsystems. It enables solutions to many long-standing computer security problems, including safe Internet browsing on corporate PCs; protection of critical enterprise servers; unhackable digital rights management (DRM); and multi-level security for government laptops, desktops, PDAs, and servers.
In other news, GHS has formed Integrity Global Security LLC , a wholly owned subsidiary. The new company will market Integrity secure separation solutions. The company, whose charter is to use Integrity as the foundation to protect government and corporate cyber assets, was formed to help solve long-standing enterprise security problems, including safe Internet browsing for corporate PCs; protection of databases, and critical data center servers; securing Internet commerce transactions; and protecting critical infrastructure networks, operator stations, and SCADA systems from hackers.
Called a proven methodology, Secure Separation Architecture creates absolutely secure and totally reliable software, including the Integrity operating system, secure call centers, secure PCs, secure Web portals, secure financial transactions, and secure PDAs. O’Dowd said that there was a need for a new organization to solve long-standing enterprise security problems. The company will be led by CEO David Chandler, a GHS veteran who was most recently its senior vice president of sales. Integrity has been deployed over the last decade in systems for the B-1B bomber, the F-35 Joint Strike Fighter, and the Boeing 787 Dreamliner.
Also read:

Controlling big machines: Large Collider, NASA Orion, strongest robot.

–  Control Engineering News Desk
Register here .





No comments
The Top Plant program honors outstanding manufacturing facilities in North America. View the 2015 Top Plant.
The Product of the Year program recognizes products newly released in the manufacturing industries.
The Engineering Leaders Under 40 program identifies and gives recognition to young engineers who...
2016 Engineering Leaders Under 40; Future vision: Where is manufacturing headed?; Electrical distribution, redefined
Strategic outsourcing delivers efficiency; Sleeve bearing clearance; Causes of water hammer; Improve air quality; Maintenance safety; GAMS preview
World-class maintenance: The three keys to success - Deploy people, process and technology; 2016 Lubrication Guide; Why hydraulic systems get hot
Flexible offshore fire protection; Big Data's impact on operations; Bridging the skills gap; Identifying security risks
The digital oilfield: Utilizing Big Data can yield big savings; Virtualization a real solution; Tracking SIS performance
Getting to the bottom of subsea repairs: Older pipelines need more attention, and operators need a repair strategy; OTC preview; Offshore production difficult - and crucial
Applying network redundancy; Overcoming loop tuning challenges; PID control and networks
Driving motor efficiency; Preventing arc flash in mission critical facilities; Integrating alternative power and existing electrical systems
Package boilers; Natural gas infrared heating; Thermal treasure; Standby generation; Natural gas supports green efforts

Annual Salary Survey

Before the calendar turned, 2016 already had the makings of a pivotal year for manufacturing, and for the world.

There were the big events for the year, including the United States as Partner Country at Hannover Messe in April and the 2016 International Manufacturing Technology Show in Chicago in September. There's also the matter of the U.S. presidential elections in November, which promise to shape policy in manufacturing for years to come.

But the year started with global economic turmoil, as a slowdown in Chinese manufacturing triggered a worldwide stock hiccup that sent values plummeting. The continued plunge in world oil prices has resulted in a slowdown in exploration and, by extension, the manufacture of exploration equipment.

Read more: 2015 Salary Survey

Maintenance and reliability tips and best practices from the maintenance and reliability coaches at Allied Reliability Group.
The One Voice for Manufacturing blog reports on federal public policy issues impacting the manufacturing sector. One Voice is a joint effort by the National Tooling and Machining...
The Society for Maintenance and Reliability Professionals an organization devoted...
Join this ongoing discussion of machine guarding topics, including solutions assessments, regulatory compliance, gap analysis...
IMS Research, recently acquired by IHS Inc., is a leading independent supplier of market research and consultancy to the global electronics industry.
Maintenance is not optional in manufacturing. It’s a profit center, driving productivity and uptime while reducing overall repair costs.
The Lachance on CMMS blog is about current maintenance topics. Blogger Paul Lachance is president and chief technology officer for Smartware Group.
This article collection contains several articles on the vital role that compressed air plays in manufacturing plants.
This article collection contains several articles on the Industrial Internet of Things (IIoT) and how it is transforming manufacturing.
This article collection contains several articles on strategic maintenance and understanding all the parts of your plant.
click me