Integrity Global Security, LLC is a new company formed to market the Integrity Secure Separation Architecture, an operating system with the highest-level security classification ever awarded by the National Information Assurance Partnership (NIAP), a program of the National Security Agency (NSA).
"We are offering military-grade security for the enterprise," says David Chandler, CEO of the new firm, and a 15-year executive with Green Hills Software, the embedded real-time operating system supplier that produced the Integrity product.
Integrity is certified to be conforming to the common criteria for the Separation Kernel Protection Profile (SKPP) standard. The NIAP has certified Integrity to Evaluation Assurance Level (EAL) 6+ High Robustness Common Criteria Certification. This designation is awarded after years of rigorous testing by experts at the NSA, including penetration testing by experts with access to Integrity's source code.
Integrity is the first product ever certified as meeting this standard. Most IT products and operating systems available today are certified to a level of EAL 4+, which certified to a moderate confidence level that a product can withstand non-hostile, inadvertent attacks.
"The Integrity certification is the first time NIAP has certified that a product is capable of defeating intentional, hostile attacks - the types of threats we now face from sophisticated criminals, corporate espionage spies, international terrorists, and foreign defense and intelligence agencies," Chandler states. "Integrity can help the nation safeguard our defense and intelligence secrets and systems, and it can help secure the control systems that run our country's critical infrastructure."
At the core of Integrity is the Secure Separation Architecture, the result of a six-step design, engineering and testing process called Principles of High Assurance Separation Engineering (Phase). In this system, security-critical components are isolated from the rest of the system, and the system has been proven in the field.
First introduced in 1997, Integrity has been used in top-secret environments, including the communications systems used in the B1 and B2 Bombers and the F35 Joint Strike Fighter. A version was made available on PCs in 2005; it can run under Windows, Linux, and Solaris. It has since evolved into a system framework that enables organizations to protect digital assets and data inside PCs, servers, thin clients, and PDAs.
Outside of its government and military clients, Integrity is in use by a few early commercial customers. The company plans to sell it directly to companies of a certain size, and distribute to others through service partners. The price had not been set as of press time.
For more information, go to: www.integrityglobalsecurity.com