Secure, Type 1 Hypervisor–Based Separation Kernel
Wind River® VxWorks® MILS Platform includes a separation kernel built to the specifications of the Separation Kernel Protection Profile (SKPP; formally, "U.S. Government Protection Profile for Separation Kernels in Environments Requiring High Robustness", version 1.03) using a Type 1 hypervisor. The secure hypervisor-based separate kernel provides a virtualized hardware environment for the partitions that are created and maintained by the separation kernel, and enables use of a wide range of guest OS partition run-time environments.
Powerful Two-Level Scheduling Architecture
VxWorks MILS Platform implements a two-level scheduler that yields better system performance, reducing cost of goods, because a system based on VxWorks MILS requires less processing power.
VxWorks Guest OS
VxWorks Guest OS provides the standard VxWorks priority-preemptive multitasking environment within a partition, enabling the leveraging of existing and legacy VxWorks-based intellectual property, including applications based on Wind River VxWorks 653 Platform.
Wind River Linux Guest OS (optional, add-on product)
Wind River Linux Guest OS, an optional, add-on product for VxWorks MILS Platform, enables Linux and other open source applications and middleware to run on VxWorks MILS Platform–based systems, providing the same commercial-grade embedded Linux solution as standalone Wind River Linux.
High Assurance Environment
User components, including applications, middleware, and drivers, that require high assurance can use the High Assurance Environment run-time execution environment with secure inter-partition communication (SIPC).
General Network Stack
General Network Stack runs in a VxWorks Guest OS partition and provides IPv4-based UDP, TCP, IGMP, multicast, and other basic networking capabilities similar to most Unix-like operating systems, and is suitable for use with low- and medium-assurance applications and components.
High Assurance Network Stack (optional, add-on product)
The High Assurance Network Stack, an optional, add-on product for VxWorks MILS Platform, uses a two-partition architecture to provide an IPv4-based network stack capable of supporting separated data streams, such as for multilevel secure (MLS) or cross-domain solution (CDS) networking. High Assurance Network Stack also enables multiple VxWorks Guest OS applications to share a common Ethernet port in a secure manner. High Assurance Network Stack has been designed and developed to be amenable to high assurance evaluation or accreditation.
Wind River Workbench Development Suite
VxWorks MILS Platform includes the Wind River Workbench development environment, based on the widely adopted Eclipse framework. Workbench provides deep capabilities that support the entire software design and development lifecycle—from hardware bring-up via JTAG, to platform and application development, to agent-based debugging in a partition, to test and deployment—and enables standardization on one common development suite across the enterprise. Workbench is extensible and scalable, allowing A&D suppliers to meet specific project needs, and it can seamlessly integrate third-party plug-ins required for supporting the entire design flow for safety critical deployments.
Configuration and Build Partitioning Tools
VxWorks MILS Platform includes tools to support configuration and build partitioning of user code for complete application isolation, not just during execution but throughout the product lifecycle, allowing faster development and improved obsolescence avoidance. This key capability of VxWorks MILS Platform is also a key requirement of any partitioned environment that must support multiple application groups or third-party hosted function suppliers delivering software builds asynchronously.
DO-297 and ED-124 Supplier Role Support
VxWorks MILS Platform enables support of RTCA DO-297 and EUROCAE ED-124 (Integrated Modular Avionics (IMA) Development Guidance and Certification Considerations). Our tools support the independent supplier roles of platform supplier, system integrator, and application supplier, clearly defining the roles of each supplier and thereby enabling the reduction of initial development, integration, and certification time and cost, as well as the costs of change and maintenance later in the development process. This role-based approach to development was pioneered for partitioned avionics systems and is equally critical to the development of multilevel secure systems based on MILS.
Complementary Technologies from the Wind River Partner Ecosystem
To ensure a complete range of integrated technologies, Wind River has established the device software industry's widest-ranging partner ecosystem, joining forces with leading hardware and software providers to address such technologies as commercial off-the-shelf (COTS) boards, system modeling tools, control design tools, test tools, certification services, and platform simulation applications. For MILS specifically, see the MILS partners page.
« Return to product page