Secure Embedded Hypervisor, Virtualization Technology (VT), Virtual Machine Technology with INTEGRITY PC at Green Hills Software

INTEGRITY PC™ Technology

System overview


	INTEGRITY PC enables multiple applications and operating systems to run securely on a single desktop or notebook PC, vastly reducing hardware requirements.

Green Hills Software’s INTEGRITY PC is a software platform
designed for any application where PC users need to
manage and protect high-value information, including:

military
intelligence
financial
medical
other critical infrastructure communities

Based on the safety- and security-certified INTEGRITY realtime operating system, INTEGRITY PC incorporates a suite of secure software components, including Green Hills Software’s award-winning Padded Cell™ secure hypervisor. Padded Cell enables multiple guest operating systems—such as Windows, Linux, and Solaris—and their applications to be run in secure partitions on a single computer.

With INTEGRITY PC, systems designers can build the most security-critical and/or hard real-time applications and run them alongside familiar operating environments to vastly reduce the size, weight, and power that would otherwise be required.

The Most Secure Operating System


The INTEGRITY operating system is currently being evaluated to meet EAL 6+ requirements. Click here to go to the web site

INTEGRITY provides the assured separation between INTEGRITY PC’s guest operating environments and critical applications, including the kernel itself. INTEGRITY is the first operating system technology to undergo a high assurance (EAL 6+) Common Criteria security evaluation and gain EAL6+ High Robustness certification. This security certification distinguishes INTEGRITY PC from other software technologies, including commercial virtual machines and hypervisors, that simply cannot be assured to protect high-value information.

With the largest market share of real-time operating systems designed for reliability-critical systems, INTEGRITY’s 10-year pedigree spans from life critical-medical devices and industrial control systems to the F-35 Joint Strike Fighter avionics and Boeing 787 Dreamliner flight control system. As a full-featured operating system, INTEGRITY can host not only common operating environments such as Windows, but also trusted applications, such as critical databases and information guards that must meet much higher assurance requirements than the low-assurance inherent in guest operating system environments.

Multi-level Security


	INTEGRITY PC can host non-secure software running under Windows, Linux, and Solaris on a single, secure platform.

For military and intelligence communities, maintaining separate computers and networks to manage information at varying sensitivity levels is a significant burden. By enabling the consolidation of computers and networks, INTEGRITY PC vastly reduces the footprint, and maintenance cost for IT infrastructure. INTEGRITY PC also:

manages information at multiple security levels
includes a cross-domain information transfer framework
provides a trusted path for the shared keyboard and mouse devices
includes a multi-factor authentication mechanism

Similar information security problems plague the financial, medical, and civil infrastructure (e.g. power grid) communities, who all need to manage highly sensitive information on unsecured networks with Internet connections. With INTEGRITY PC, multiple domains of interest can be managed on a single computer, providing bullet-proof security while retaining access to all the common applications and environments users are accustomed to.

Open Standards

Besides supporting common operating environments such as Microsoft Windows and Linux, INTEGRITY PC provides a full-featured, POSIX conformant application programming interface (API). This enables native POSIX applications to be created or easily ported to INTEGRITY, maximizing software reuse and interoperability.

A wide variety of open source POSIX applications, such as the Apache web server and Python interpreter, run on INTEGRITY PC.

Form Factor Flexibility

INTEGRITY PC technology is suitable for the complete range of commercial, off-the-shelf computing platforms, including PDAs, tablets, laptops, desktops, and servers. INTEGRITY PC can scale from a true thin client, supporting remote terminal services such as Windows Remote Desktop and Virtual Network Computing (VNC), to all forms of business client PCs, all the way up to high-end data center servers.

Utilizing the latest advances in hardware technology

INTEGRITY PC takes advantage of the latest hardware security and virtualization facilities, including Intel® vPro™ processor technology.

Intel vPro includes Intel Virtualization Technology (VT), which improves the performance of Padded Cell secure hypervisor software, and Intel Trusted eXecution Technology (TXT) which improves the hardware root of trust of PC platforms, enabling secure boot and remote attestation of the hardware, BIOS, and trusted applications, including the INTEGRITY kernel.

Green Hills Software works closely with hardware companies like Intel to ensure that users can take advantage of the latest processor features as soon as they come to market.

Deployments


	Security critical applications co-existing with, yet securely partitioned from, Windows and its untrusted applications.

INTEGRITY PC was first deployed in 2005. Since then, it
has been adopted by a number of technology organizations who needed to improve the security and flexibility of their mobile and desktop PC resources.

For specific availability information, please contact
Integritypc-sales@ghs.com.


Products \| Benefits \| Services \| Support \| Partners \| About \| Home Contact \| Request Info \| Search \| Webmaster \| RSS \| Copyright © 2009 Green Hills Software