High-Assurance, Real-time MILS Architecture W. Mark Vanfleet Bill Beckwith Senior NSA/IAD Objective Interface Systems Security Analyst CEO/CTO
[email protected] [email protected] This presentation represents joint research between the Air Force, Army, Navy, NSA, Boeing, Lockheed Martin, Objective Interface, Green Hills, LynuxWorks, Wind River, GD, Rockwell Collins, MITRE, U of Idaho Why Security in Embedded Systems? 6/28/2004 High-Assurance, Real-Time MILS Architecture Vanfleet, Beckwith - 2 1 Why Security in Embedded Systems? • A Year in the Life of a Utility System – 100 - 150 hits/day on control network – 17 intrusions – 2 Denial of Service (DoS) events – 3 Loss of Control Events • Switchgear controller • Boiler Deaerator controls 6/28/2004 High-Assurance, Real-Time MILS Architecture Vanfleet, Beckwith - 3 Why Security in Embedded Systems? (cont.) • To reduce the risk of – Damage to internal systems • Expense to repair • Operational blockage – Damage to customer systems • Loss of goodwill • Market recognition: irreparable damage to quality image • Liability for customer losses – Peace of mind • Spend attention on forward initiatives • Less monitoring required • Sleep better • To reduce costs – Potentially lower insurance – Less monitoring costs 6/28/2004 High-Assurance, Real-Time MILS Architecture Vanfleet, Beckwith - 4 2 Why Security in Embedded Systems? (cont.) • Australian Water Utility – Vitek Boden, 48, April 23rd, 2000, Queensland, Australia • disgruntled ex-employee of equipment supplier • Vehicle became command