Follow us on Twitter
Virtualization: LynuxWorks and Themis Demonstrate Multi-Level Platform for Secure Military Applications
LynxSecure highly secure virtualization technology and CoolShell blade server create a consolidated versatile platform for military applications
SAN JOSÉ, Calif., MILCOM 2010, November 1, 2010—LynuxWorks™, Inc., a world leader in the embedded software market, and Themis Computer, a leading supplier of high-performance board and system-level products for military applications, today announced that they have teamed up to demonstrate a new rugged, high-performance multi-level secure platform solution at MILCOM 2010. The companies will showcase LynuxWorks' LynxSecure secure separation kernel and embedded hypervisor running on Themis' CoolShell blade server. LynxSecure is a highly secure virtualization solution that utilizes the CoolShell's hardware-virtualization technology and multiple processor cores to provide a versatile platform for secure environments.
"The new reality of network-centric operations requires us to move with agility between the need to protect sensitive data and the practical necessity to share essential situational information in real time," said Gurjot Singh, CEO and president at LynuxWorks. "Military operations can now have access to multiple environments on a single system, which is immensely valuable for collaboration."
LynxSecure makes it possible to securely run multiple guest operating systems and their applications on a single platform. It does this by isolating applications into separate partitions to prevent unintended or dangerous software interactions. In a multicore processor environment, LynxSecure further provides the ability to consolidate two or more physically separate systems into one unit.
For example, it is possible to securely bring together multiple battlefield applications with varied security classifications and run them in separate partitions on a single server. This would allow low-security applications such as C/JMTK mapping, chat messaging and weather to run together on the same server with high-security applications such as software-defined radio (SDR). LynxSecure provides the necessary infrastructure for secure communication and works in conjunction with encryption and other protections required by specific applications. It conforms to the multiple independent levels of security (MILS) architecture, which provides strict guidelines for data isolation, damage limitation, and information flow policies. Furthermore, LynxSecure's virtualization environment allows legacy applications to run unmodified, enabling systems to be modernized with increased information sharing and security. Consolidating multiple applications on a single compact platform allows a savings in Space, Weight and Power (SWAP). It also reduces equipment costs and system maintenance.
"Battle groups have more in common with today's distributed enterprises, than with earlier stove-piped, application-specific computing systems," said William Kehret, CEO and president at Themis. "For example, the Navy, for its afloat computing platforms, is migrating away from distributed bus-and-board architectures and using more aggregated server-based services," explained Kehret. "These are truly enterprise-level solutions at sea, and the combination of the Themis CoolShell server with the LynxSecure software platform allows these to be used without compromising performance, functionality or security."
The principle barrier to higher compute-density in modular electronic packaging is the cooling of high-dissipation devices, most notably, the new breed of multicore microprocessors. The CoolShell blade server technology combines commercial motherboards with novel packaging techniques, to achieve a new level of performance, reliability and maintainability. The resulting open-architecture computing platform is ideally suited for challenging environments. CoolShell technology provides a very efficient way to remove heat from processors and other high-dissipation devices. CoolShell blades consist of sealed, conduction-cooled "shells" that include their own impeller assemblies, drawing cooling air over integrated heat exchangers. The resultant Field Replaceable Units (FRUs) are in turn integrated into a robust, totally passive rack-mounting enclosure with front-panel-only accessibility.
Themis' CoolShell blade servers combine unprecedented network connectivity with up to eight optical/copper ports and a simplified cabling system for easy installation and maintenance. Low total cost of ownership (TCO) is assured by modular, front panel only access for all active components. Network and IO security is assured through the use of independent controller channels, including both Copper and Fiber Gigabit Ethernet NIC's. Themis' CoolShell technology provides kinetic management and thermal headroom to accommodate aggressive scaling of commercial microprocessor and GPU core density, speed and power.
Visit our booths
To meet with the experts and learn more about new rugged, high-performance multi-level secure (MLS) systems and cross-domain platform solutions, please visit LynuxWorks in Booth #627 and Themis in Booth #437.
About Themis Computer
Themis Computer is a leading developer and supplier of high performance board and system level products for mission-critical telecommunications, military/aerospace, and industrial embedded applications. Themis provides open standards-based embedded computing platforms that support the Solaris™, Linux®, and Windows® operating systems. Themis' products incorporate features designed to ensure high reliability and availability while reducing the risks of failure caused by extreme environments. An ISO 9001 certified company, Themis Computer practices Total Quality Management (TQM) in all areas of its business, from engineering and manufacturing to customer service. Themis Computer is headquartered in Fremont, California and offers worldwide service and support. For more information please visit http://www.themis.com/ or email: info@themis.com.
About LynuxWorks
LynuxWorks, a world leader in the embedded software market, is committed to providing open and reliable real-time operating systems (RTOS) and software tools to embedded developers. The company's LynxOS family of OSes offers open standards with the highest level of safety and security features, enabling many mission-critical systems in defense, avionics and other industries. The latest product in the portfolio, the award-winning LynxSecure offers a secure separation kernel and embedded hypervisor that forms a platform for the development of high assurance systems. Since it was established in 1988, LynuxWorks has created technology that has been successfully deployed in thousands of designs and millions of products made by leading communications, avionics, aerospace/defense, and consumer electronics companies. LynuxWorks' headquarters are located in San José, California.
LynuxWorks is a trademark and LynxOS and BlueCat are registered trademarks of LynuxWorks, Inc. Other brand or product names are registered trademarks or trademarks of the respective holders. Linux is a registered trademark of Linus Torvalds. Intel and Intel Core are registered trademarks of the Intel Corporation in the U.S. and other countries.
LynuxWorks press contacts
| Kirsten Long Director, Marketing Communications LynuxWorks, Inc. USA +1 408-979-4404  |
Barbara Stewart Patterson & Associates USA 480-488-6909  |
| Hamid Mirab Managing Director EMEA LynuxWorks Ltd. United Kingdom +44 208-906-9506  |
Peter van der Sluijs Neesham Public Relations Europe +44 1442-879222  |
Virtualization Technology Demonstrations
Intel Virtualization Demonstration with LynxSecure Secure Virtualization on Sandy Bridge Platform (.WMV file)- LynxSecure Virtualization Demo on a Themis Ruggedized RES-12XR3
- LynxSecure 5.0: A new Generation of Secure Virtualization
advantages
- Optimal security and safety—the only operating system designed to support both CC EAL-7 and DO-178B level A
- Real time—time-space partitioned separation kernel for superior determinism and performance
- Hypervisor and virtualization technology— supports multiple heterogeneous, both para-virtualized and fully virtualized, operating system environments on the same physical hardware including Intel® VT
- Highly scalable—supports Symmetric MultiProcessing (SMP) and 64-bit addressing for high-end scalability
- Support for open standards—100% binary compatibility for Linux- or POSIX-based software applications allows them to migrate to a highly robust, secure environment
- Faster time to market—enables developers to begin early development for secure applications
- Building in RTOS Support for Safety- & Security-Critical Systems
- LynuxWorks explains the differences between safety-critical and security-critical applications and how to meet their demanding requirements with the LynxOS-178 RTOS and the LynxSecure hypervisor. (EE Times Design, August 2011)
- Enhancing Application Performance on Multicore Systems
- Tips on optimizing a multicore real-time system, including virtualization, avoiding synchronization and concurrency while maximizing application parallelism. (Military Embedded Systems, February 2011)
- Hardware Virtualization puts a new spin on Secure Systems
- Real-time determinism and military security don't have to be separate realities. A combination of a secure separation kernel and an embedded hypervisor enables whole new levels of system security. (COTS Journal, October 2010)
- Using a Separation Kernel to add Military-Grade Security to Legacy Systems
- A challenge for the software designer is how to integrate modern military-grade software programs into legacy software designed long before security standards were predominant in system requirements. (VME Critical Systems, Summer 2010)
- Virtualization: Keeping Embedded Software safe and Secure in an Unsafe World
- A new, secure methodology is needed to separate systems of different security levels which run on shared resources—without compromising the performance of legacy systems. (EE Times, June 2010)
- Secure Virtualization Combines Traditional Desktop OSs and Embedded RTOSes in Military Embedded Systems
- Advances in software and hardware technologies now make it feasible to use both embedded and desktop operating systems in a secure military system. (Military Embedded Systems, May 2010)
- DO-178B Provides Certification Safety net
- Developers of commercial avionics software must demonstrate compliance with DO-178 guidelines. The FAA has issued additional guidance for so-called DO-178B Reusable Software Components (RSCs as defined in AC20-148), which allow for reuse of certifications. (COTS Journal, November 2009)
- Designing Safety-critical Avionics Software Using open Standards
- Safety-critical avionics systems have continually grown more complex and software-intensive. Regulatory authorities and avionics manufacturers have responded with guidance such as DO-178B and RSC to ensure that software performs safely, with controlled development cost. (Boards and Solutions, September 2009)
- Two Different Realms: RTOS Support for Safety-critical vs. Security-critical Systems
- Safety- and security-critical system functions are evolving simultaneously, with different yet similar requirements. Modern RTOSes are stepping up to meet these needs. (VME and Critical Systems, June 2009)
- Virtualization Makes Better use of Open-source OSes and apps
- With the introduction of the embedded hypervisor, embedded systems can avoid certain performance or licensing issues inherent to open-source OSes and applications. (EE Times, March 23, 2009)
- Secure Virtualization Technology can Extend the life of Legacy Systems
- By combining the concept of virtualization and security, one can consolidate multiple legacy systems running on heterogeneous operating systems onto a single host system with high-assurance security. (Military Embedded Systems, January/February 2009)
- Virtual Machines: Intel's CPU Extensions Transform Virtualization
- Virtualization has traditionally presented its share of design challenges in information-assurance-based systems. But now, Intel's VT-x and VT-d CPU extensions are changing the game and showing potential to become the de facto path to virtualization. (Military Embedded Systems, January 2009)
- Separation Kernel for a Secure Real-time Operating System
- The technical foundation adopted for the so-called MILS architecture is a separation kernel like LynxSecure, which permits multiple functions to be realised on a common set of physical resources without unwanted mutual interference. (Boards and Solutions Magazine, February 2008)
- Advances in Virtualization aid Information Assurance
- Advances in the newest Intel® processors are making virtualization much easier to implement in security applications than ever before. (Embedded Computing Design, January 2008)
- Protecting our most Vital Systems
- Some significant defence programmes are already committed to a new approach to high-threat, high-asset-value systems. Rance DeLong explains MILS. (Components in Electronics, April 2007)
- Perspectives: Security and the Separation Kernel
- Today's avionics systems are designed to support more than one application, using a partitioned operating system and memory management units to ensure applications have adequate separation. (Avionics Magazine, April 2007)
- MILS: An Architecture for Security, Safety, and Real Time
- The unrelenting growth and integration of embedded controls, information processing, and communications has created a need for systems that provide robust protection for resources and services in the face of serious threats. (Embedded Technology Magazine, November 2006)
- Partitioning Operating Systems Versus Process-based Operating Systems
- Partitioning operating systems are the latest buzz, while processes, by contrast, have been around for over 30 years. Both provide memory protection, however, the intent behind them is very different.
- DO-178B and the Common Criteria: Future Security Levels
- Although there are similarities between the airborne safety-critical requirements in RTCA/DO-178B and the Common Criteria, ISO 14508, compliance with the higher levels of security in the Common Criteria demands meeting additional security requirements. (COTS Journal, April 2006)
- Reusing Safety-Critical Software Components
- Safety-critical systems often operate together as a single "system-of-systems," making it important that they meet the most stringent and rigorous requirements for safety-criticality. The failure of one module in a system could create other failures or vulnerabilities, or worse yet, failure of the system as a whole. (COTS Journal, August 2005)
- Using the Microprocessor MMU for Software Protection in Real-Time Systems
- With minimal impact to overall system performance, user tasks and the kernel can be protected from accidental corruption by using multiple protected address spaces.
- Improving code Migration and Reuse
- The unrelenting growth and integration of embedded controls, information processing, and communications has created a need for systems that provide robust protection for resources and services in the face of serious threats. (Embedded Computing Design, August 2006)
- FCS Program Rolls Forward in Formation
- A wireless data network, with advanced communications and technologies, links soldiers with 18 new, lightweight manned and unmanned ground vehicles, unmanned aircraft, sensors and weapons—and it's all in one program. (COTS Journal, June 2005)
- Secure Operating Systems for Deeply Embedded Devices
- As we add more intelligence to our embedded devices, we find that they are becoming increasingly integrated into our information technology infrastructure. Though system security is not a new concept, security-in-depth is a new paradigm developers are now starting to address. (RTC Magazine, September 2004)
Virtualization / RTOS News
- Can Sensitive data for Tactical Military Environments be Protected in the Cloud? -4/19
LynxSecure Secure Virtualization Inside Malware-Analysis System at Infosecurity 2012 -4/2- Video: Certifiable RTOS For Safety Critical Systems - DESIGN West 2012 -4/10
- New S.E.C.U.R.E Computing Platform for Sensitive Cloud Deployments -4/2
- Ruggedized Board Support for Real-Time FAA DO-178B Systems: Curtiss-Wright SVME/DMV-183 -3/28
- LynuxWorks Joins Future Airborne Capability Environment (FACE) Consortium -3/19
- Device-Driver and Real-Time Programming for the LynxOS RTOS Family, San José, CA, USA, May 21-25
- FACE Consortium Exposition (Future Airborne Capability Environment), Lexington Park, MD, USA, Jun 5
- Gartner Security & Risk Management Summit, National Harbor, MD, USA, Jun 11-14
