Slashdot Mirror


Secure OS Gets Highest NSA Rating, Goes Commercial

ancientribe writes "A hardened operating system used in the B1B bomber and other military aircraft has now been released commercially, after receiving the highest security rating by a National Security Agency-run certification program. Green Hills Software's Integrity-178B operating system was certified as EAL6+, which means that it can defend against well-funded and sophisticated attackers." The company is not saying how much the OS would cost a potential customer: "The system and its associated integration and consulting services are custom solutions." Both Windows and Linux are EAL 4+ certified, which means they can defend against "inadvertent and casual" security breach attempts.

26 of 352 comments (clear)

  1. Two steps from the highest, actually by moderatorrater · · Score: 4, Funny

    EAL7+ means that it can defend against well-funded and sophisticated attacks and doesn't have an NSA backdoor built into it. EAL8 is exactly like EAL7+, only it can do it while getting slashdotted.

    1. Re:Two steps from the highest, actually by jbeaupre · · Score: 5, Funny

      EAL9+ means it autonomously retaliates against the attacker's system.
      EAL10+ means it autonomously retaliates against the attacker.

      --
      The world is made by those who show up for the job.
    2. Re:Two steps from the highest, actually by Sponge+Bath · · Score: 3, Funny

      My computer goes to EAL11!

      The power of God blazes out of the box to melt the faces and explode the heads of intruders,
      just like in Raiders of the Lost Mainframe.

    3. Re:Two steps from the highest, actually by Anarke_Incarnate · · Score: 5, Funny

      EAL11+ means it goes to eleven. The others they go to 10, but this one goes to 11, so if you need that extra.....push off the cliff....

    4. Re:Two steps from the highest, actually by Kadmos · · Score: 2, Funny

      EAL12+ means it can drink your milkshake.

  2. But will it run Doom? by alcmaeon · · Score: 1, Funny

    or Duke Nukem 3D?

  3. Worse than Dell with the Windows tax by Anonymous Coward · · Score: 5, Funny

    When you order a B1B, you pay for the Integrity-178B license even if you later install a copy of Linux For Strategic Bombers.

    1. Re:Worse than Dell with the Windows tax by Anonymous Coward · · Score: 1, Funny

      You meant GNU/Linux for Strategic Bombers.

    2. Re:Worse than Dell with the Windows tax by Anonymous Coward · · Score: 2, Funny

      When you order a B1B, you pay for the Integrity-178B license even if you later install a copy of Linux For Strategic Bombers.

      Please don't run Linux For Strategic Bombers. The head maintainer is a well-known a**hole, for years he's refused to accept patches for longstanding bugs, and he's changed the license to prevent 3rd parties from distributing modified versions.

      The bombing community has created a new fork of the project starting from the last Free version, called "Bombastic". It's already capable of handling 80% of mission requirements, and version 1.0 should be released in the near future. Please encourage all of your squadrons to use this truly Free alternative instead.

    3. Re:Worse than Dell with the Windows tax by rrohbeck · · Score: 3, Funny

      When you order a B1B, you pay for the Integrity-178B license even if you later install a copy of Linux For Strategic Bombers.

      Aah, I always wondered what LSB stands for.

  4. lower that 4+ by internerdj · · Score: 5, Funny

    Inadvertant and Casual attempts?
    Oops. I tripped over my computer and hacked your system. Sorry.

    1. Re:lower that 4+ by CorporateSuit · · Score: 3, Funny

      "I hacked you? Sorry mate, I was just trying to play Solitaire"

      Looks like we're lucky this time. Last kid that accidently played videogames with our system chose Global Thermonuclear War!

      --
      I am the richest astronaut ever to win the superbowl.
  5. Re:n/t by Smidge207 · · Score: 1, Funny

    A dog and a horse both have four legs but, they do have several other differences.

    Agreed: the size of their respective cocks, for one

    =Smidge=

    --
    Is it just my observation, or is eldavojohn an idiot?
  6. Re:n/t by thedonger · · Score: 2, Funny

    That is, "there," not "their." Don't I feel stoopid.

    --
    Help fight poverty: Punch a poor person.
  7. Re:Anonymous Coward by CorporateSuit · · Score: 4, Funny

    As much faith as I have in the NSA's security abilities, does anyone have any idea what criteria they were using exactly? Any in-depth results they've made public, preferably?

    It's an aggregate result of how many social security numbers B1 bombers have lost over the last 10 years divided by how many B1 bombers, with the software installed, have been stolen out of government offices or left behind in taxi cabs.

    --
    I am the richest astronaut ever to win the superbowl.
  8. Re:n/t by the_other_chewey · · Score: 5, Funny

    So basically it costs money to get EAL verified, and the farther up the scale you go, the more money it costs to run the testing.

    Is Scientology somehow involved in this?

  9. Re:Cost? by Anonymous Coward · · Score: 1, Funny

    Well if an Anonymous Coward guarantees it...

  10. Re:Anonymous Coward by bl8n8r · · Score: 2, Funny

    NSA E.A. Testing Criteria
    ---
    EAL0 $1,000,000
    EAL1 $1,000,000
    EAL2 $2,000,000
    EAL3 $3,000,000
    EAL4 $4,000,000
    EAL5 $5,000,000
    EAL6 $6,000,000
    EAL7+ Call for quote.

    --
    boycott slashdot February 10th - 17th check out: altSlashdot.org
  11. Re:n/t by Anonymous Coward · · Score: 5, Funny

    Don't I feel stoopid.

    Especially so after you forgot to check 'Post Anonymously' the second time around...

  12. Re:n/t by Anonymous Coward · · Score: 1, Funny

    This is Tom Cruise. You are in serious trouble for suggesting that all Scientology does is enrich its leaders. I'm going to sue you for all you're worth, which I'll kindly donate to my church.

    Now, which other chewey do you say you are?

  13. Re:Article misleads about EAL6 by oGMo · · Score: 2, Funny

    Actually it's EAL8. But you can't know about it, because it's insecure. Products that qualify for EAL8 can be neither confirmed nor denied, because if you knew about them, they wouldn't qualify. Those developers that make it are EAL8-ed.

    ;-)

    --

    Don't think of it as a flame---it's more like an argument that does 3d6 fire damage

  14. example use by hey · · Score: 5, Funny

    ssh my-b1b
    login: root
    password: hellosss
    last login Tue Nov 18 17:22:14 EST 2008 from nsa
    # drop -4 bombs
    # exit

  15. Re:n/t by Anonymous Coward · · Score: 1, Funny

    If you can't trust linux, to launch your nukes, would you prefer a series of yarn and wheels? (note: highly insecure to angered moths)

  16. Re:n/t by ozbird · · Score: 3, Funny

    Mathematicians are insane.

    Fixed that for you.

    Admittedly, mathematicians can formally prove they are more intelligent the CSers, but nobody except another mathematician could a) understand the proof, and b) give a shit.

  17. Re:Frosty Piss by Hucko · · Score: 2, Funny
    --
    Semi-automatic amateur armchair Australian philosopher; conjecture ready at any moment...
  18. Re:n/t by Atario · · Score: 3, Funny

    Higher levels require some sort of formal methods use in the design and testing. This is very unlikely to ever happen for Linux (it is virtually impossible to create a formal design retroactively; either it does not correspond to the system or it is just as complex as the system).

    No problem.

    1. Create black-box-style formal spec of Linux
    2. Rebuild Linux from scratch using only the specs

    Easy!

    --
    "A great democracy must be progressive or it will soon cease to be a great democracy." --Theodore Roosevelt