QNX News Releases
QNX Ships First Multi-Core RTOS to Achieve Common Criteria Security Certification
Embedded Systems Conference, Booth #936, San Jose, CALIF., March 31, 2009 — QNX Software Systems today announced that the QNX® Neutrino® RTOS Secure Kernel v6.4.0 has been certified to the stringent security requirements of the Common Criteria ISO/IEC 15408 Evaluation Assurance Level 4+ (EAL 4+).
The QNX Neutrino RTOS Secure Kernel marks two industry firsts: it is the only full-featured RTOS to achieve Common Criteria certification, and it is the only Common Criteria-certified RTOS to implement symmetric multiprocessing (SMP) and bound multiprocessing (BMP) for multi-core processors. As a result, it is the only certified RTOS to support the parallelism necessary for successful multi-core designs. The QNX Neutrino RTOS Secure Kernel is also the only Common Criteria-certified RTOS to support adaptive partitioning, an efficient form of time partitioning that prevents malicious code and denial-of-service (DoS) attacks from monopolizing the CPU.
The QNX Neutrino RTOS Secure Kernel is latest QNX initiative to provide customers in the defense, industrial, automotive, and medical industries with standards-based, certified products that provide assured levels of portability, interoperability, and security. Often, these products help customers succeed in their own certification efforts. Case in point: The QNX-based Falcon III AN/PRC-152(C) military radio from Harris is the first device to be certified as fully compliant with version 2.2 of the Software Communications Architecture of the U.S. military’s Joint Tactical Radio System (JTRS SCA).
The certification to Common Criteria EAL 4+ indicates that the QNX Neutrino RTOS Secure Kernel exceeds the assurance requirements required for EAL 4. To earn EAL 4 certification, a product must be methodically designed, tested, and reviewed to the highest commercial standards. The "+" indicates that the certification extends to QNX Software Systems’ vulnerability remediation process. Certification to EAL 4+ required a rigorous analysis not only of the QNX Neutrino RTOS Secure Kernel, but also of the development processes used to create it.
The QNX Neutrino RTOS Secure Kernel was certified by the Communications Security Establishment Canada (CSEC), one of the global signatories to the Common Criteria for Information Technology Security Evaluation, an international standard agreed to by the United States and 23 other nations. The Common Criteria establishes standards for security functionality, security assurance, and security evaluation.
“By its very design, the QNX Neutrino microkernel embodies the principles of security that form the basis of modern security standards, including the Common Criteria,” said Kerry Johnson, director of product management, QNX Software Systems. “Certification to EAL 4+ confirms our commitment to addressing today’s security requirements. Including multi-core and partitioning capabilities in the QNX Neutrino RTOS Secure Kernel confirms that we are equally committed to addressing tomorrow’s design challenges.”
About QNX Software Systems
QNX Software Systems, a Harman International company (NYSE: HAR), is the industry leader in realtime, embedded OS technology. The component-based architectures of the QNX® Neutrino® RTOS, QNX Momentics® development suite, and QNX Aviage® middleware together provide the industry’s most reliable and scalable framework for building innovative, high-performance embedded systems. Global leaders such as Cisco, Daimler, General Electric, Lockheed Martin, and Siemens depend on QNX technology for network routers, medical instruments, vehicle telematics units, security and defense systems, industrial robotics, and other mission- or life-critical applications. Founded in 1980, QNX Software Systems is headquartered in Ottawa, Canada, and distributes products in over 100 countries worldwide.
QNX Software Systems
+1 613 591-0931
QNX, Aviage, Momentics, and Neutrino are trademarks of QNX Software Systems GmbH & Co. KG, registered in certain jurisdictions, and are used under license. All other trademarks and trade names belong to their respective owners.