News & Press

Green Hills Software's INTEGRITY-178B Operating System Achieves Major Milestone in Most Stringent OS Security Evaluation

Santa Barbara, CA, August 29, 2005—Green Hills Software, Inc., a technology leader in operating systems and software development tools for safe and secure systems, announced today that the U.S. Government's National Information Assurance Partnership (NIAP), a collaboration between the National Institute of Standards and Technology (NIST) and the National Security Agency (NSA), has formally accepted the security evaluation plan for the INTEGRITY 178B operating system. As a result, INTEGRITY-178B is now listed on the official register of products in evaluation at This is a significant milestone toward the most stringent certification ever undertaken by an operating system.

The security evaluation of INTEGRITY-178B began in April 2005, when Green Hills Software selected Science Applications International Corporation (SAIC), a NIAP approved Common Criteria Testing Lab (CCTL), to perform the evaluation (see related announcement at Since then, in parallel with the software evaluation, Green Hills Software, SAIC and NIAP have finalized the evaluation work plan and Green Hills Software has prepared the documentation required by NIAP. NIAP management formally accepted the plan on August 12.

“To prepare for this next stage in the evaluation process, SAIC has had a chance to assess some of the certification evidence, artifacts and related processes that Green Hills Software has used as the basis for their DO-178B safety certifications,” said Julie Taylor, assistant vice president and division manager at the SAIC Common Criteria Testing Laboratory. “We’ve worked with Green Hills Software to produce the Security Target and other documents that we have presented to NIAP. Green Hills has made all of its deliveries on schedule.”

INTEGRITY-178B is undergoing the most stringent security evaluation undertaken by an operating system under the International Common Criteria for Information Technology Security Evaluation standard (ISO 15408). INTEGRITY-178B is being evaluated for conformance to the Separation Kernel Protection Profile (SKPP), the most demanding Protection Profile currently defined. The evaluation is being done at Evaluation Assurance Level 6 augmented (EAL6+). On the seven-level EAL scale, no operating system has previously been certified beyond EAL5+.

“Green Hills Software is leading the charge to more secure computing,” said Dan O’Dowd, founder and chief executive officer of Green Hills Software. “While INTEGRITY-178B is progressing toward an EAL6+ certification, no other operating system listed on the NIAP Products in Evaluation register is aiming beyond EAL4+. In addition, INTEGRITY-178B is being evaluated to the stringent Separation Kernel Protection Profile; most other operating system certifications have been to the significantly more lenient Controlled Access Protection Profile (CAPP).”


The INTEGRITY-178B operating system was designed from the ground up to meet the most demanding security and safety requirements. It employs a layered, high-assurance Multiple Independent Levels of Security (MILS) architecture with a small separation kernel at its core. INTEGRITY-178B has been designed into almost every major next-generation commercial and military aircraft, including the Boeing 787, Airbus A380, Lockheed Martin F-35 Joint Strike Fighter, F/A-22 Raptor, Eurofighter Typhoon, Airbus A400M and Boeing C-17 Globemaster.

About Green Hills Software

Founded in 1982, Green Hills Software, Inc. is the technology leader for real-time operating systems and Device Software Optimization (DSO) for 32- and 64-bit embedded systems. Our royalty-free INTEGRITY® RTOS, velOSity™ microkernel, compilers, MULTI® and AdaMULTI™ integrated development environments and TimeMachine™ debugger offer a complete development solution that addresses both deeply embedded and high-reliability applications. Green Hills Software is headquartered in Santa Barbara, CA, with European headquarters in the United Kingdom. Visit Green Hills Software on the web at

Green Hills Software, the Green Hills logo, MULTI, INTEGRITY, velOSity, AdaMULTI and TimeMachine are trademarks or registered trademarks of Green Hills Software, Inc. in the U.S. and/or internationally. All other trademarks are the property of their respective owners.

Aviation Week-Jul. 2005
Operating System Picked for 787 Controls Finds Applications in Secure Communications (pdf)

SD Times—Jun. 2005
Common Criteria or Common Confusion? (pdf)

RTC Magazine-Sep. 2004

Operating Systems: Shouldering the Security
and Safety Burden (pdf)

EE Times-Jun. 2004
Partitioning helps build system reliability
EE Times-Apr. 2004
Linux: unfit for national security? (pdf)
Avionics-Mar. 2004
Keeping Secrets in Integrated Avionics (pdf)
EE Times-Aug. 2003
Designing Secure Reliable Systems
EE Times-Apr. 2002
Proper RTOS designs can improve device security (pdf)

North American Sales Contact:
Green Hills Software, Inc.
30 West Sola Street,
Santa Barbara, CA 93101,
Tel: 805-965-6044
Fax: 805-965-6343

International Sales Contact:
Green Hills Software Ltd.
Fleming Business Centre
Leigh Road
Hampshire SO50 9PD
Tel: +44 (0)2380 649660
Fax: +44 (0)2380 649661


Media Contacts:
Green Hills Software, Inc.
Lynn J. Robinson
Tel: 805-965-6044

Green Hills Software, Inc.
Barbel French
Tel: 805-965-6044

© 1996-2024 Green Hills Software Privacy Policy Cookies Policy Copyright & Patent Notices