The VxWorks MILS Platform 2.x Fundamentals training workshop provides engineers with a fast, cost-effective way to learn to deliver the security foundation that meets real-time operating system (RTOS) requirements for high robustness (EAL6+) multilevel secure (MLS) systems.
After this course, participants will be able to the following:
- Describe the Common Criteria, MILS architecture, and high assurance security principles
- Explain how Wind River VxWorks MILS Platform 2.x and high assurance security standards form the basis of a security-certified partitioned system, including networking support, XML configuration, and debugging
- Accelerate the configuration, development, and deployment of MILS systems using the built-in XML development tools and Wind River Workbench
- Configure, debug, build, and test secure MILS applications with VxWorks MILS Platform 2.x
- Wind River VxWorks MILS Platform 2.0
- Application developers utilizing the MILS architecture to create secure applications
- Those who will develop applications using the VxWorks MILS kernel
Day 1
Introduction to MILS
- Common Criteria Overview
- Protection Profiles
- Separation Kernel Protection Profile (SKPP)
- MILS and Evaluation Process Overview
- Validation Oversight Review
- Role-Based Development
Getting Started
- VxWorks MILS Overview
- Mapping of VxWorks MILS to SKPP
- Guest Operating Systems
- Debug Tools
- On-Chip Debugging
- VxWorks MILS Debug Agent
- Directory Structure
- Documentation and Support
- Getting Started Lab
Day 2
System Architecture
- MILS Kernel
- Scheduling and Initialization Function
- Configuration Data, Vector Sets
- VxWorks MILS “Separation Kernel”
- User Partitions
- Virtual Boards
- Guest Operating Systems
- VxWorks MILS VxWorks Guest OS
- General Network Stack
- High Assurance Environment
- Device Drivers
- Secure Interpartition Communication
- Virtual Board and Task Scheduling
- System Concepts Lab
Configuring and Building MILS Applications
- Workflows
- XML Configuration and Build
- XML Compiler
- C++ Development
- Configuration and Build Lab
Day 3
Platform/Application Level Debugging
- Source Code Browsing
- VxWorks MILS Debug Agent
- JTAG
- Virtual Board Object Viewer
- Source-Level Debugger
- AMIO: Application Multiplexed I/O
- Debugging Lab
Wind River MILS Network Stacks
- VxWorks MILS General Network Stack
- Overview, Usage, Documentation
- Supported Protocols
- MILS Network Stack Lab
Day 4
System API
- VxWorks MILS VxWorks Guest OS API
- High Assurance Environment API
- VxWorks MILS General Network Stack API
Example Applications
- Example 1: Two (Network Stack) Virtual Boards That Communicate Through a Guard Partition
- Information Flow Control
- Security Policy Definition
- Data and Fault Isolation
- Time Partitioning
- Understanding of Layered Assurance Principles
- Example 2: “Crypto” Application
- Interfacing with an Untrusted Network
- Creating Domain Guard Filter
- Transmitting Decrypted, Filtered Information onto a Trusted Network
Prerequisite Courses
Prerequisite Skills
- User-level familiarity with the host operating system on which the Wind River VxWorks MILS Platform 2.x will be installed
- One year C or C++ programming
- Basic understanding of operating systems and debugging techniques