STOP OS™ Trusted Operating System

STOP OS™ is the premier secure operating system that provides flexible security policies, a Linux®-compatible application programming interface, and high performance and contains FIPS 140-2 validated cryptographic modules. STOP OS gives the defense, intelligence community, government, and enterprise solution providers and integrators a trustworthy and robust foundation for developing trusted information sharing, guarding, and server applications.

STOP OS Version 7 is currently in Common Criteria evaluation.

STOP OS version 7 is the successor to the STOP OS version6 operating system used to power the XTS-400™ trusted computing platform. While both products are designed and built from the ground up with security as the primary feature, STOP OS version 7 improves on the performance and flexibility of its predecessors. By delivering top-notch processing and network performance, it rivals and surpasses the performance figures of commercial, off-the-shelf operating systems.

Flexible security policy

STOP 7 provides flexible ways to secure an organization’s sensitive information assets:

• Role-based access control: a flexible, permission-based mandatory access control policy
• Bell-LaPadula multi-level security policy: a mandatory read-down/write-up policy
• Biba multi-level integrity policy: a mandatory read-up/write-down policy
• Multi-compartment security and integrity for Bell-LaPadula and Biba policies
• Traditional UNIX-style discretionary access control

These security policies can be used separately or in conjunction to provide robust, granular system and data protection. Solution providers can leverage this flexibility to tailor a customized security policy that meets unique agency needs.

Trusted applications with high assurance

STOP OS contains a Linux®-like programmatic interfaces enable developers to port or develop applications easily on the system. These applications generally reside outside the system’s target of evaluation (TOE), making them easier to certify and accredit while still deriving a high degree of security and integrity from the underlying mandatory protection mechanisms in the TOE.

STOP OS and XTS platform are used in over 700 cross-domain deployments worldwide. Several of these deployments include accredited high assurance guard applications that provide strict control over automated sharing of information among networks with different sensitivity classifications.

Flexible deployment options

STOP OS is designed to be portable, flexible, and mobile in its deployment options. The operating system can be deployed on a wide range of platforms, from the server room to the tactical edge, including:

• Single-board computers
• Embedded devices
• Virtual appliances

This hardware flexibility opens the door to tactical deployments, such as onboard aircraft, in command vehicles, in backpacks, etc. This flexibility is critical to current and future tactical information sharing programs, particularly those with cross-domain requirements. STOP OS allows for a wide range of application possibilities, from traditional guards to file servers and network routing.

Certifications

• Common Criteria: EAL 4+
• FIPS 140-2 Validation

For more information, please contact us.

XTS-400