Multi-partitioning by virtualization for embedded systems
PikeOS is the first commercial implementation of a very new concept we call
SSV, for Safe and Secure Virtualization. Virtualization is quite common in the IT world but embedded systems have some specific requirements in terms of size and supported hardware platforms. Real-time support is another challenge. But when you also need to address the highest levels of safety and security, then the virtualization techniques coming from the IT world are completely useless
The software industry is probably unique in its custom to release products to the market even when they are likely to have residual bugs. Users have (grudgingly) come to accept that complex programs apparently can not be made bug-free, and have adjusted to the occasional system failure as a fact of modern life. This, however, is entirely different in the area of safety-critical software systems, and for good reason: A failure of such a system could harm or even kill humans. Therefore, it must be shown to be reliable before it can be allowed to control, e.g. an airplane, a chemical plant, a vehicle, etc.
Although the need to deal with security threats was first recognized for defense systems, in today’s world malicious attacks are resulting in large financial losses and services outages in many industries. Historically, most commercial systems have been developed with haphazard attention to security concerns, resulting in tremendous costs and business risks. Suppliers have a clear competitive edge if they are able to leverage the security technology developed for defense systems certification and efficiently apply its principles in commercial markets.
