Fritz Technologies Corporation has completed work for the Department of Defense (DoD) and U.S. intelligence community to develop a trusted computing solution using state-of-the-art, commercial-off-the-shelf (COTS) LynxSecure software from LynuxWorks, Inc. This Multiple Independent Levels of Security (MILS) solution allows access to unclassified, secret and top secret applications and data to be maintained in separate domains on a single server, or workstation, and supports strictly controlled sharing between those domains.
Fritz designed and delivered the prototype system that demonstrates the consolidation of multiple physical servers supporting different classification levels into a single server (or multiple server farms into a single farm), while maintaining strict separation between security domains.
Bobbi-Michelle Wehrfritz, Fritz Technologies CEO, noted that “Fritz Technologies leveraged its expertise with separation kernels and virtualization to create this high assurance solution. We developed and delivered a prototype platform based on LynxSecure that also takes advantage of the Trusted Platform Module (TPM) in a server environment. We are very excited about what this platform can do for data center and cloud security in both the government and the commercial sectors.”
“This system changes the game for companies who are looking for truly secure multitenancy of applications and data in the cloud,” said Gurjot Singh, CEO, LynuxWorks, Inc. “We are very pleased to have worked with Fritz Technologies on this project and look forward to providing highly secure virtualization-based platforms with them in the future.”
The Assured Sharing Platform Services – Server Separation Development (ASPS-SSD) is designed to provide customers with all of the benefits of virtualization without compromising security by rapidly consolidating existing server farms and making them far more secure. This reduces operational costs while providing the capability to enforce robust separation of security domains for customers who require Grade A secure systems in the cloud.
About Fritz Technologies
Fritz Technologies Corporation develops, implements and delivers innovative cyber-security solutions for government and industry, all based on leading-edge open-source and commercial-off-the shelf (COTS) technologies. Fritz delivers across the full spectrum of cyber-security requirements, including user authentication, attestation, trusted initialization, secure data transfer and assured separation of secure domains (e.g., unclassified, secret and top secret). Fritz solutions have been developed for the DoD and intelligence community to make sure that secret and top secret intelligence and military information is accessible, protected, trusted and securely shared, enabling rapid communication and decision-making, to ensure organizational and mission success.
Fritz develops and delivers secure solutions for data centers and private and public clouds in the following areas:
• Virtualization: Open Source and COTS operating systems (OS), hypervisors, separation kernels and real-time operating systems (RTOS)
• Secure consolidation and operation of multi-domain server farms
• Certified and accredited secure cross-domain solutions: hardware through software
• Highly secure external mass storage architectures
• Secure transfer solution designs utilizing various protocols such as UDP and TCP/IP
• Secured startup of servers using TPM-assisted remote attestation.
LynxSecure provides one of the most flexible secure virtualization solutions for use in Intel architecture-based embedded and computer systems. Designed to maintain the highest levels of military security and built-from-the-ground-up to achieve it, LynxSecure 5.0 now offers an industry-leading combination of security with functionality, allowing developers and integrators to use the latest software and hardware technologies to build complex multi-OS based systems. LynxSecure 5.0 gives two types of device virtualization, either direct assignment of physical devices to individual guest OSes for maximum security, or secure device sharing across selected guest OSes for maximum functionality in resource constrained endpoints such as laptops. LynxSecure also offers two OS virtualization schemes: para-virtualized guest OSes such as Linux and LynxOS-SE OSes offering maximum performance; and fully virtualized guest OSes such as Windows, Solaris and Chromium OSes requiring no changes to the guest OS. Another key performance feature that LynxSecure offers is the ability to run both fully virtualized and para-virtualized guest OSes that have Symmetric Multi-processing (SMP) capabilities across multiple cores.
About LynuxWorks, Inc.
LynuxWorks, a world leader in the embedded software market, is committed to providing open and reliable real-time operating systems (RTOS) and software tools to embedded developers. The company’s LynxOS family of OSes offers open standards with the highest level of safety and security features, enabling many mission-critical systems in defense, avionics and other industries. The latest product in the portfolio, the award-winning LynxSecure offers a secure separation kernel and embedded hypervisor that forms a platform for the development of high-assurance systems. Since it was established in 1988, LynuxWorks has created technology that has been successfully deployed in thousands of designs and millions of products made by leading communications, avionics, aerospace/defense, and consumer electronics companies. LynuxWorks’ headquarters are located in San José, CA.