Secure, Type 1 Hypervisor–Based Separation Kernel
Wind River® VxWorks® MILS Platform includes a separation kernel built to the specifications of the Separation Kernel Protection Profile (SKPP; formally, "U.S. Government Protection Profile for Separation Kernels in Environments Requiring High Robustness," version 1.03) using a Type 1 hypervisor. The secure hypervisor-based separation kernel provides a virtualized hardware environment for the partitions that are created and maintained by the separation kernel, and enables use of a wide range of guest operating systems as partition run-time environments.
Supports Single Core and Multi-core Processor Configurations
Take advantage of the latest multi-core processor configurations to improve performance and consolidate multiple applications from different domains or different security levels onto the same hardware platform.
Security Evaluation Evidence Package Available
VxWorks MILS Platform (single core version) offers a security evaluation evidence package that provides artifacts based on requirements from the SKPP, the Common Criteria version 2.3, and RTCA DO-178C Design Assurance Level (DAL) A.
Powerful Two-Level Scheduling Architecture
VxWorks MILS Platform implements a two-level scheduler that yields better system performance, enabling development of security-critical systems without sacrificing high performance.
VxWorks 5.5 Guest OS
VxWorks 5.5 Guest OS provides the standard VxWorks priority-preemptive multitasking environment within a partition, enabling the leveraging of existing and legacy VxWorks-based intellectual property, including applications based on Wind River VxWorks 653 Platform.
VxWorks 6.9 Guest OS (multi-core only)
Similar to VxWorks 5.5 Guest OS, VxWorks 6.9 Guest OS provides the advanced VxWorks 6 priority-preemptive multitasking environment within a partition.
Wind River Linux Guest OS (optional, add-on product)
Wind River Linux Guest OS, an optional, add-on product for VxWorks MILS Platform, enables Linux and other open source applications and middleware to run on VxWorks MILS Platform–based systems, providing the same commercial-grade embedded Linux solution as standalone Wind River Linux.
High Assurance Environment
User components, including applications, middleware, and drivers, that require high assurance can use the High Assurance Environment run-time execution environment, a small executive designed for security-critical system components that may come under high scrutiny in a system-level security evaluation.
General Network Stack
General Network Stack runs in a VxWorks 5.5 Guest OS partition and provides IPv4-based UDP, TCP, IGMP, multicast, and other basic networking capabilities similar to most Unix-like operating systems, and is suitable for use with low- and medium-assurance applications and components.
Wind River Network Stack (multi-core only)
Wind River Network Stack is a full-featured, dual IPv4/IPv6 stack specifically designed for embedded real-time systems. It runs on, and is included with, VxWorks 6.9 Guest OS. Wind River Network Stack incorporates Wind River Advanced Networking Technologies, which provides IPv4/IPv6 networking, security, wireless, and mobility capabilities for compatibility with a wide range of networking environments. It provides rich networking features with high-performance, scalable implementation and a small footprint. It conforms to relevant industry standards and provides a clean code structure for easy integration and faster implementation.
High Assurance Network Stack (optional, add-on product)
The High Assurance Network Stack, an optional, add-on product for VxWorks MILS Platform, uses a two-partition architecture to provide an IPv4-based network stack capable of supporting separated data streams, such as for multilevel secure (MLS) or cross-domain solution (CDS) networking. High Assurance Network Stack also enables multiple VxWorks 5.5 and 6.9 Guest OS applications to share a common Ethernet port in a secure manner. High Assurance Network Stack has been designed and developed to be amenable to high assurance security evaluation or accreditation.
Wind River Workbench Development Suite
VxWorks MILS Platform includes the Wind River Workbench development environment, based on the widely adopted Eclipse framework. Workbench provides deep capabilities that support the entire software design and development lifecycle—from hardware bring-up via JTAG, to platform and application development, to agent-based debugging in a partition, to test and deployment—and enables standardization on one common development suite across the enterprise. Workbench is extensible and scalable, allowing A&D suppliers to meet specific project needs, and it can seamlessly integrate third-party plug-ins required for supporting the entire design flow for safety critical deployments.
Configuration and Build Partitioning Tools
VxWorks MILS Platform includes tools to support configuration and build partitioning of user code for complete application isolation, not just during execution but throughout the product lifecycle, allowing faster development and improved obsolescence avoidance. This key capability of VxWorks MILS Platform is also a key requirement of any partitioned environment that must support multiple application groups or third-party hosted function suppliers delivering software builds asynchronously.
DO-297 (ED-124) Supplier Role Support
VxWorks MILS Platform enables support of RTCA DO-297 (EUROCAE ED-124): Integrated Modular Avionics (IMA) Development Guidance and Certification Considerations. Our tools support the independent roles of platform supplier, system integrator, and application supplier, clearly defining the roles of each supplier and thereby enabling the reduction of initial development, integration, and certification time and cost, as well as the costs of change and maintenance later in the development process. This role-based approach to development was pioneered for partitioned avionics systems and is equally critical to the development of multilevel secure systems based on MILS.
Complementary Technologies from the Wind River Partner Ecosystem
To ensure a complete range of integrated technologies, Wind River has established the device software industry's widest-ranging partner ecosystem, joining forces with leading hardware and software providers to address such technologies as commercial off-the-shelf (COTS) boards, system modeling tools, control design tools, test tools, certification services, and platform simulation applications. For MILS specifically, see the MILS partners page.
« Return to product page