Wind River Aerospace and Defense

Transcription

1 Wind River Aerospace and Defense A&D Product Overview Chip Downing Senior Industry Marketing Manager Aerospace and Defense 1 February 2007

2 Wind River DSO Leadership We deliver Device Software Optimization (DSO) products and services that enable our customers to develop, run, and manage device software better, faster, at lower cost, and more reliably. 2 February 2007

3 3 February 2007

4 World Class Clients Automotive Consumer Aerospace & Defense Industrial Networking BMW Bosch/Blaupunkt Daimler Chrysler Delphi GM Harman/Becker Hyundai Magneti-Marelli Nissan Siemens VDO VW Audi Opel BMW Xanavi Visteon Alcatel Ericsson Foxconn Hewlett-Packard Iwatsu Konica Minolta Matsushita Mitsubishi Motorola Philips Samsung Sanyo Sharp Sony Sumitomo Thomson Westell Airbus BAE Systems Boeing EADS European Space Agency General Dynamics Harris Honeywell IAI JPL KHI LG Innotek Lockheed Martin L-3 MHI Orbital Sciences NASA Northrop Grumman Raytheon Smiths Aerospace Thales ABB Agilent Bosch GE Honda Honeywell Mitsubishi National Instruments Rockwell Automation Samsung Schneider Siemens Tektronix Yaskawa Yokogawa 400 million devices worldwide use Wind River technology / 42,000 developers Alcatel Cisco EMC Ericsson Fujitsu Hewlett-Packard Huawei Intel Juniper Kyocera LG Electronics Lucent Marconi Motorola NEC Nokia Nortel Siemens 4 February 2007

5 Wind River in Aerospace and Defense Land Sea Air Space Commercial Aviation Abrams Tank Challenger Tank CHALS-X CIBADS II Fuchs Spürpanzer GIG-E Program JCAD JTRS MLRS Patriot Missile PDCUE TDOA System THAAD Missile TRC 4000 AEGIS AN/AQS20/X Sonar A/N SQQ-89 ASW Astute Class Sub. Harpoon Missile Mark 48 GMVLS MK41 5 inch gun NCSSS NAVMACS Phalanx CIWS SGS SSDS Trident Missile Type 45 Destroyer Apache Helicopter AWACS Airbus A400M B-1B B-2 B-52 C-130 AMP EC-725 Helicopter F-15 F-16 F-18 F-22 F35 (JSF) Global Hawk UAV Jaguar SH 60 Helicopter UCAS-N (X-47B) A2100 Satellite EGNOS HOPE-X Space Plane Mars Rovers Mars Odyssey Mars Recon Orbiter Mars Pathfinder Mars Recon Orbiter MTSAT-2 Satellite MUBLCOMM Satellite NASA Space Shuttle NPOESS ORBCOMM PROBA Satellite SBIRS SORCE Satellite X38 Space Lifeboat Airbus A318 Airbus A319 Airbus A320 Airbus A340 Airbus A380 ATIDS Boeing 777 Boeing 787 Dreamliner EC-225 Helicopter GlobalStar 2100 VICTORIA Program WAAS 5 February 2007

6 Safety Critical Design Wins Airbus MRTT Tail Boom (EADS CASA in Spain ARINC Level A - D) MIC (EADS CASA in Spain) Classified Project (UK) Airbus A400M IFF (Indra Systemas in Spain) MIC (EADS CASA in Spain) Classified Project (France) Classified Project (Germany) Boeing 787 Dreamliner Common Core System and ~60 applications (Smiths/Boeing and ~11 others ARINC Multiple DO-178 Levels) Boeing C-130 AMP Classified System (Smiths ARINC 653 Level B) Tactical Multi-Function Display (Rockwell Collins) Boeing KC767A Tanker Aircraft Mission Control System (Smiths/Boeing) ARINC Multiple DO-178B Levels 6 February 2007

7 Safety Critical Design Wins ABB Pipeline Valve Controller (IEC SIL3, 2003) Eurocopter EC-225/EC-725 Flight Management Display System (DO-178 Level A, 2004 Eurocopter France) FAA WAAS WAAS Ground Station (DO-178 Level B, 2000) (Raytheon US) MoD (UK) Classified Ground System (DEF STAN 00-56) Classified Flight Computer (DEF STAN 00-56) FC-BISA (IEC SIL2, 2004) (LogicaCMG) Saab Grippen Classified Project (South Africa) X-47B J-UCAS UCAV Classified Project (USA) Mission Management System (Northrop Grumman) Vehicle Management System (Northrop Grumman) Plus many more Classified and Confidential projects 7 February 2007

8 VxWorks in Space Systems Mars Exploration Rovers Spirit and Opportunity Mission Computers on IBM RAD6000 rad-hardened processor pl_mars_rovers.html NASA Deep Space One Flight Computer on IBM RAD6000 rad-hardened processor Mars Pathfinder Mission Computer on IBM RAD6000 rad-hardened processor NASA Mars Odyssey Command & Control and Data Transfer Network February 2007

9 Grand Telescopio Canaries (GTC) The Project VxWorks powers the second largest and the most technologically advanced telescope in the world, based on the island of La Palma. Its huge eye will open soon in 2006 to shed light on major events such as the birth of a galaxy, the death of stars and even the origins of universe Martí Pi i Puig, Head of the Control Group for GTC explains After considering several alternatives, we chose Wind River VxWorks because we needed a sufficiently stable and high-performance real-time operating system so that we were free to concentrate on developing applications. For more details, please check 9 February 2007

10 Boeing P-8A MMA VxWorks Common Core Computer Carrier Grade Linux Aircraft Mission System 10 February 2007

11 Boeing C-130 AMP Maiden Flight Boeing Flies C-130 AMP Aircraft for First Time ST. LOUIS, Sept / PRNewswire-FirstCall/ -- The Boeing Company (NYSE: BA) today announced the successful first flight of the C-130 Avionics Modernization Program (AMP) aircraft. The flight took place on Sept. 19 as part of the most comprehensive C-130 avionics modification ever conducted. 11 February 2007

12 Wind River VxWorks 653 Base of the Boeing 787 Common Core System (CCS) CCS Functions Approximately 60 applications, including flight management, breaks, cabin pressure, displays, fuel management, health management, landing gear, steering, thrust reversers 11 different vendors Dozens of teams All operating on VxWorks 653 Image copyright Boeing 12 February 2007

13 Safety Critical Solutions for Aerospace & Defense Partner Software Ecosystem Wind River Workbench OCD Tornado 2 General Purpose Platform Platform for Safety Critical VxWorks 653 Platform for Safety Critical VxWorks MILS Platform for Safety Critical VxWorks 5 Integrated Middleware Integrated Middleware Integrated Middleware Integrated Middleware VxWorks 6 / Linux VxWorks 653 VxWorks MILS VxWorks 5 Partner Hardware Ecosystem Services Practice for Aerospace & Defense 13 February 2007

14 Eclipse Has Arrived in Embedded Over 3 MILLION downloads per year of Eclipse Driven by major users such as Boeing, Cisco, Ericsson, others Customers want an open tools integration platform, not lock-in owned by vendors IBM jumpstarted the Eclipse project with $40 Million in funding Maturity of free, Open C / C++ developer tools in Eclipse is moving quickly (~50% of Eclipse users now use CDT) Free Eclipse now has support for 15 different programming languages One forecast: 50% of embedded developers will use Eclipse in 2 years (17% now) 14 February 2007

15 Wind River: An Eclipse Leader Eclipse is an open platform for tool integration that leverages open-source licensing and a community of tool developers Wind River Leadership Premier member 8 Wind River engineers are dedicated to Eclipse projects Wind River s CTO is an Eclipse Board Member Wind River helps lead the Device Software Development Platform (DSDP); one of 10 top-level projects Total Wind River investment in Eclipse is approx. $2M per year (300K lines contributed to date) Wide Industry Acceptance Over three million downloads per year 115+ member organizations 640+ third-party plug-ins 400+ SourceForge projects 19 books about Eclipse 600+ paid EclipseCon 2004 attendees 10,000 improvements in Eclipse 3.0 See 15 February 2007

16 Configurable IDE Showing Multiple Context Debugging Project Navigation Color-coded Context Multiple Color- Coded Contexts Threads, Cores, OSes Multiple Connections Mixed-Mode Disassembly Breakpoints Locals, Watch, Registers 16 February 2007

17 Workbench - Multiple Context Debugging Systems Multiple cores in a die Multiple CPUs on a board Multiple CPU boards in a system Kernel-level debug Applications Multiple applications Multiple tasks, threads, processes Multiple kernels Stepping through system calls Connections TCP/IP Serial JTAG Debug Agents kgdb / kernel agents User application agents WDB agent JTAG/ICE agents Multiple Locations, anywhere on the network 17 February 2007

18 Wind River Workbench Wind River Workbench Graphical User Interface Host Shell Eclipse Framework Project Build Editor Source Analyzer Analysis Code Trace Memory Leak Data Trace Performance Dynamic Code Insertion Tools 3 rd Party CM Compiler Debugger System Viewer Coverage 3 rd Party Tools Ethernet, Serial, JTAG, USB, TIPC, Proxy Agents On Host VxWorks* Linux ThreadX Nucleus Other OS VxWorks Simulator * VxWorks 5, VxWorks 6, VxWorks 653, and VxWorks MILS 18 February 2007

19 Workbench - System Analysis Tools ProfileScope Statistical Profiling MemScope Memory Analysis with Leak Detection StethoScope Graphical Data Monitoring Tool that provides visualization of data TraceScope Code Execution tracing tool with call monitoring and stack tracing CoverageScope Complete code execution coverage information for testing 19 February 2007

20 FCS Network 20 February 2007 Approved for Public Release, Distribution Unlimited, TACOM 12 SEP Copyright 2007 Wind River Systems, Inc. 2006, case

21 21 February 2007

22 Boeing Selects Wind River Workbench as the Device Software Development Tool Suite for the U.S. Army's Future Combat System (FCS) Program Wind River to Help Increase Overall Program Productivity for Transformational Army Initiative Boeing selected Wind River Workbench, based on its ability to operate across multiple development sites, hosts, operating systems and companies developing for the FCS program. Wind River's involvement in the FCS program stands to increase overall productivity while significantly reducing risk, complexity and program costs compared to traditional development environments. Because all of the constituent parts of the FCS program are viewed as systems in themselves -- including the 18 platforms, the network itself, and even the individual soldier -- it is commonly referred to as a system of systems. The network is being designed by more than 2000 developers in various development sites across the United States. FCS will allow soldiers to link to sensors, to unmanned air platforms, and to manned and unmanned ground platforms using advanced communications and technologies. The FCS program sought a common software development environment that was an extensible, standards-based platform, to address a broad range of needs for its software development projects, said Paul Schoen, Director of Software for SoSCOE, FCS. Based on these and other defined criteria, the historical evidence of Wind River Workbench's Eclipse foundation promises a significant increase in productivity due to its flexibility, ease-of-use and scalability. Details, 17 March 2006: Approved for Public Release, Distribution Unlimited, TACOM 08 MAR 2006, case February 2007

23 Workbench Diagnostics Live Patch * Base products Workbench / Eclipse * Project, Build, Edit (Sensor Point Development) Sensor Point Log Viewer Workbench Debugger (Core File Enabled) Device Management Agent (Core Image Aware) VxWorks * Diagnostics IDE Plug-In Sensor Point Compiler Single-Device Connectivity Sensor Point Manager Device Testability Solution Designed for individual developers to perform root-cause analysis on software defects during the implementation phase Capabilities: Sensor point workflow: development, deployment, log collection, log analysis Live monitoring, test injection and patching of running system Core file workflow: core-image collection and core-file analysis Single target connectivity Increases developer productivity by compressing debug cycles and eliminating unnecessary iterations 23 February 2007

24 DSO Helps the Promise of Linux Come True The Challenges of Linux Building the right Linux distribution Making do with inadequate tools Integrating roll-your-own and third-party technology Testing and validation The Wind River Solution Industrial-strength platform Pristine source 120 packages via RPM Cross-build system with full traceability Integrated and tested Workbench world-class development suite Tightly integrated partner ecosystem Global services and support 24 February 2007

25 General Purpose Linux / VxWorks Platforms Integrated Development Suite Integrated Partner Software Standards-based Middleware Linux Kernel 2.6 / VxWorks 6.2 Integrated Partner Hardware Plus Global Services and Support Wind River Workbench Eclipse-based development suite Complete lifecycle development Cross-build system Wind River Distribution Industrial-grade Tested, validated, supported, and maintained Carrier Grade Linux or VxWorks 6.2 Networking and security packages Integrated Partner Ecosystem Software SCA Advanced networking Database Hardware COTS ATCA and CPCI boards Development and reference boards DO-178B Level A Certification for VxWorks 6.x in February 2007

26 Wind River Acquires FSM Labs VxWorks VxWorks Real-Time Process Wind River VxWorks Kernel-Mode Applications Device Drivers Hard Real-Time Linux Linux Applications VxWorks Wind River Linux Standard Linux Kernel Device Drivers Real-Time App. Wind River Real-Time Core Soft Real-Time Linux Linux Applications Wind River Linux Standard Linux Kernel PREEMPT_RT Device Drivers Hardware Interrupts Hardware Interrupts Hardware Interrupts Designed from the ground-up for hard real-time Run multiple real-time processes within a fully real-time operating system All hard real-time applications with very small footprint Certifiable 100% determinism Proprietary IP solution Broadly available across all architectures and processors Dual-kernel technology Runs a single real-time process within a non-realtime OS Designed for mission critical applications that require hard real-time 100% determinism Proprietary and patented IP solution Largely independent of architectures or existing drivers Open-source patches to standard kernel Run one or more processes with soft real-time priority Designed for audio/video other bandwidth applications with statistical determinism Pure open-source solution in mainstream kernel Implementation dependencies on drivers, SMP, architecture 26 February 2007

27 Scalable VxWorks 6.x Profiles Basic OS I/O system Select() support Full-Formatted I/O Drivers ANSI stdio ANSI stdlib ANSI time TTY Driver Full--Featured Drivers Full Featured Memory Allocations Coprocessor Support Floating Point Support Signals Pipes Basic Kernel Message Queues Exception Tasks Task Hooks Task Restart Dynamic Memory Allocation Dynamic Object Creation Minimal VxWorks 6 Kernel Interrupts Multitasking System Clock Watchdogs Simple Drivers Semaphores Cache Support Exception Handling ANSI ctype, string Events Static Allocation of System Resources 27 February 2007

28 Wind River Solution for SDR Based on General Purpose Platform 3.2 for VxWorks and Linux CRC SCARI++ Eclipse Boeing Standard for FCS Common Framework Workbench Eclipse Framework Communications Research Centre (CRC) Core Framework Scalable DO-178B & IEC Certification Evidence Power Management POSIX conformant Objective Interface Systems (OIS) ORBexpress (CORBA) VxWorks 6.2 IPv4/v6 Networking Hardware Partners Linux Global Services and Support IPv6 Gold Logo Interpeak for MILS/DO-178B Pristine (kernel.org) Transparent build process Thorough testing & validation Global services and support 28 February 2007

29 Thales Communications JTRS Cluster 2 MBITR (JEM) Radio Tornado 2.2 Raytheon SCA Core Framework OIS ORBexpress VxWorks Thales Cluster Two Hardware First JTRS radio to be certified by the JTRS Joint Program Executive Office for SCA compliance (with waivers) Certified by the National Security Agency (NSA) for Type 1 encryption 29 February 2007

30 Spectrum Signal Processing Zeligsoft Tornado 2.2 Harris SCA Core Framework ACE Tao ORB Spectrum Signal Middleware (HAL, BSP, TCP/IP Stack) Spectrum Signal SDR-3000 VxWorks Spectrum Signal SDR-4000 Wind River VAR for SDR 25+ customers 150+ Seats deployed Turn-key platform for prototyping and deployment JTRS Technology Lab standard for waveform SCA compliance 30 February 2007

31 Select Wind River SDR Customers Program Advanced Comms Advanced Deployable System (ADS) Finnish SDR Demonstrator JTRS Cluster 2 MBMMR Mine Detection Mobile EW System Mobile SIGINT NMT SATCOM SATCOM Project SCA-conformant radio SCA-conformant radio SCAMP SDR Programs Test & Certification TSAT WIN-T many more programs Company Lockheed Martin Space Systems Harris Elektrobit Thales Raytheon Thales Underwater Systems Leading defense contractor U.S. Department of Defense Harris, Raytheon NASA QinetiQ Leading European radio company Israeli company Rockwell Collins Cubic JTRS JTeL Harris BAE, Raytheon many more customers 31 February 2007

32 Wind River Vision for SDR: Choice and Flexibility! Wind River has integrations in different combinations with SDR Development Tools Core Framework Networking CORBA COTS Hardware CRC (Communications Research Centre Canada) PrismTech The Mathworks Zeligsoft CRC (Communications Research Centre Canada) Harris Raytheon Interpeak (recently acquired by Wind River) OIS (Objective Interface Systems) PrismTech Ace TAO Curtiss Wright, GE Fanuc, Mercury Computer Spectrum Signal Altera, Xilinx, TI 32 February 2007

33 787 Dreamliner P-8A MMA C-130 VxWorks 653 A400M A330 MRTT 767 Tanker 33 February 2007

34 ARINC 653 API ARINC 653 is a specification for an application executive used for integrating avionics systems on modern aircraft It is an API of 51 routines: time and space (memory) partitioning, health monitoring (error detection and reporting), communications via ports ARINC 653 OSes and applications are typically certified per DO-178B; different partitions can be certified to different DO-178B levels Federated System Cockpit Cockpit Displays Displays Flight Flight Air Air Data Management Data Management Computer System Computer System Integrated Modular Avionics (IMA) Air Air Data Data FMS FMS MMU-Partitioning MMU-Partitioning Operating Operating System System Displays Displays ARINC February 2007

35 Workbench Development Suite Eclipse framework Support for multiple RTOS: VxWorks 653, VxWorks 6, WR Linux Editor, complier, debugger C, C++, Ada (partner product) On-chip debug support Analysis tools System Viewer Source Code Analyzer Platform for Safety Critical ARINC 653 Wind River Workbench Integrated Partner Software Integrated Partner Support Certifiable ARINC 664 Stack OpenGL ARINC 615A Software Data Loader DO-178B Certification Tool Suite Cuts Cert Time, Cost XML Configuration Suite DO-178B Level A qualified development tool Schema submitted to ARINC 653 committee for Supplement 3 DO-178B qualified verification tools Agent for Certification Environment Port monitor CPU monitor Memory monitor Host shell command VxWorks 653 Hardware Support (PowerPC) Support, Training, Professional Services VxWorks 653 Time and space partitioning Plus slack-stealing feature Meets SC-200 IMA requirements ARINC 653 compliance, including Health Management Fast cold/warm restart (2 sec / 100 millisecond typical) Multiple partition OS with support for: ARINC 653 API VxWorks 5.5 API subset POSIX subset Customer legacy OS possible DO-178B Level A cert evidence 35 February 2007

36 VxWorks 653 Architecture User Mode ARINC Application ARINC API POSIX Application POSIX API VxWorks Application VxWorks API Ada Application Ada API Partition OS Partition OS Partition OS Partition OS VxWorks 653 Application Executive (with ARINC 653 ports and time/space scheduler) Board Support Package (BSP) Kernel Mode Hardware Board 36 February 2007

37 VxWorks 653 Scheduler Priority-Preemptive Inside Partitions T1 T1 T1 T1 T1 T1 T1 T1 T3 T3 T2 T2 T2 T2 T2 T2 T4 T4 T3 T3 T2 T2 T3 T3 Partition OS Partition OS Partition OS Partition OS Partition #1 Partition #2 Partition #3 Partition #4 Time 37 February 2007

38 Health Monitor Hierarchy Process HM Also known as the error handler process, is present within a partition for the handling of process related errors and events The handler is installed, by the application, by calling hmerrorhandlercreate() Partition HM For the handling of partition errors and events that may effect the operation of the threads within the partition Memory and task context belong to the Core OS but the scheduling occurs within the partition window Module HM Present in parallel to all partitions and hence all partition HMs It is not part of any partition window and has priority to execute over all partitions, partition HMs and all other Core OS tasks 38 February 2007

39 Solved Now: Application Independence Without Wind River Configuration data C compiler or other unqualified tool Certify all together App 1 App 2 App 3 App 4 Configuration data from unqualified tool Other ARINC 653 operating system Configuration data (partitions, ports, etc.) in C, text, XML, created by unqualified tool must test and certify entire system as a whole, even for minor configuration change Higher initial development time, certification cost, cost of change With Wind River XML configuration data Qualified XML compiler Certify independently and asynchronously App 1 App 2 App 3 App 4 Binary configuration data VxWorks 653 XML-based configuration data managed by DO-178B qualified XML binary compiler Test, certify, and recertify applications independently and asynchronously Result: Lower development time, initial cert cost, and cost of change 39 February 2007

40 DO-297 Role Separation Platform Provider System Integrator FMS Application Developers Display XML Tables XML Tables XML Config File XML Tables XML Config File XML Tables XML Config File Nav XML Tables XML Config File XML Config File XML Compiler / Checker DO-178B Qualified Development Tool Binary Configuration Data XML Business Rules Hardware Platform 40 February 2007

41 Platform Provider XML Tables XML Config File XML Table Generator for Review of Configuration Data for Credit System Integrator XML Tables XML Config File FMS XML Tables XML Config File Application Developers Nav XML Tables XML Config File Display XML Tables XML Config File XML Table Generator DO-178B Qualified Verification Tool XML Business Rules Platform Data Schedule Tables HM Table HM Table HM Table Application FMA Application Nav Application Display Reviewers, DERs and Certification Authorities 41 February 2007

42 VxWorks 653 Certification Evidence Plan for software aspects of certification Software quality assurance plan Software configuration management plan Software development plan Software requirements standards Software design standards Software coding standards Software verification plan Software requirements specification 42 February 2007 Software design document Version description document Traceability matrix Software development folder Design reviews Code reviews Test reviews (5,000 tests) Functional tests (270,000 LOC) Coverage results Tool qualification documentation Software accomplishment summary Software Vulnerability Analysis (will be required by DO-178C) ~2 GB sealed DVD with independent certification artifacts over 55,000 hyperlinked files

43 Certification Evidence Audit Audit of the Auditors Mike DeWalt / Certification Services FAA Designated Engineering Representative (DER) Former National Resource Specialist for Avionics Software for FAA 43 February 2007

44 Wind River Trusted Stack for VxWorks 653 Wind River is developing a new trusted stack, suitable for DO-178B Level A and high-eal MILS, based on its Interpeak technology An instance can be shared by multiple applications as middleware, there can be multiple instances, or an instance can be run in a partition with a single application Policies can be different for kernel vs. stack vs. applications, or for different stack instances IPv4, UDP, available, IPv6 and routing on roadmap 44 February 2007

45 What is MILS? Multiple Independent Levels of Security Federated Security MILS Unclassified Data Data // Device Device Secret Secret Data Data // Device Device Unclassified Terminal Secret Secret Terminal Unclassified Unclassified Secret Secret MILS MILS OS OS Device Device Top Top Secret Secret Data Data // Device Device Top Top Secret Secret Terminal Unclassified Unclassified Secret Secret MILS MILS OS OS Workstation Workstation 45 February 2007

46 Derived from VxWorks 653 Wind River MILS Originally built for C-130 AMP; two NSA reviews Proven technology for time-space partitioning + Special Middleware partitions, Security Policy Database, Reference Monitor, Secure Audit Log, Secure Boot, Secure Delivery Integrated with Eclipse Maintains COTS Open position Can migrate VxWorks 5.5 application code to a partition Services can assist with code migration Configuration managed by certified XML tool separates configuration data for U, S, TS, etc. Supports many partitions with high performance Available now as proof-of-concept (eval seats + Services $50K minimum for install and training) In use now by Boeing and Lockheed 46 February 2007

47 VxWorks MILS Architecture User Mode Secure Application #1 Unclassified Secure Application #2 Secret Middleware Secure Application #3 Top Secret COIL API POSIX API VxWorks API Partition OS Partition OS Partition OS MILS Separation Kernel (SK) Board Support Package (BSP) Kernel Mode Hardware Board 47 February 2007

48 MILS Platform Driver Placement At Any Level, Or Split (Critical for DMA) User Mode Secure Application #1 Unclassified Secure Application #2 Secret Middleware Secure Application #3 Top Secret VxWorks or 653 API POSIX API Ada API Partition OS Partition OS Partition OS VxWorks MILS Separation Kernel (SK) Board Support Package (BSP) Kernel Mode Hardware Board 48 February 2007

49 Solved Now: Application Independence Without Wind River Configuration data C compiler or other unqualified tool Certify all together App 1 App 2 App 3 App 4 Configuration data from unqualified tool Other MILS operating system Configuration data (partitions, ports, etc.) in C, text, XML, created by unqualified tool must test and certify entire system as a whole, even for minor configuration change Higher initial development time, certification cost, cost of change With Wind River XML configuration data Qualified XML compiler Certify independently App 1 App 2 App 3 App 4 Binary configuration data VxWorks MILS XML-based configuration data managed by DO-178B qualified XML binary compiler Test, certify, and recertify applications independently and asynchronously Result: Lower development time, initial cert cost, and cost of change 49 February 2007

50 Security Separation Platform Provider System Integrator FMS Application Developers Display XML Tables XML Tables XML Config File XML Tables XML Config File XML Tables XML Config File Nav XML Tables XML Config File XML Config File XML Compiler / Checker DO-178B Qualified Development Tool Binary Configuration Data XML Business Rules Hardware Platform 50 February 2007

51 VxWorks MILS / Trusted Stack Architecture User Mode Secure Application #1 Unclassified COIL API Secure Application #2 Secret POSIX API Wind River Trusted Stack Secure Application #3 Top Secret VxWorks API Partition OS Partition OS Partition OS MILS Separation Kernel (SK) Board Support Package (BSP) Kernel Mode Hardware Board 51 February 2007

52 Semiconductors COTS Hardware Design Tools Certification Aerospace & Defense Partners VxWorks, VxWorks 653, VxWorks MILS and Linux Platforms File / Network Systems Ada Support Java Support Graphics Systems Military Data Interfaces Software Defined Radio Simulation and Test Middleware Actel, Altera, ARM, Freescale, IBM, Intel, Xilinx 52 February 2007 Aitech, CES, Curtiss Wright, GE Fanuc (Condor, Radstone, SBS, VMIC), Mercury, Motorola ECC, Radisys, Thales ARTiSAN,, Esterel (SCADE), IBM Rational, The Mathworks (MATLAB / Simulink), Prismtech, Telelogic / I-Logix, Zeligsoft Certification Services (Mike DeWalt), CygnaCom, System Safety (Leanna Rierson), TÜV, Verocel (George Romanski) Ciprico, Datalight, Interpeak (acquired by Wind River) AdaCore, DDC-I, Aonix Aicas, Aonix, Apogee/IBM, DDC-I, Esmertec, Skelmir 3DVU, ALT Software, Engenuity / VAPS, Esterek (SCADE Display) Seaweed, Tilcon AIM, GE Fanuc (Condor, Radstone, SBS, VMIC), Tech Sat ACE Tao, CRC (SCA framework), OIS, Spectrum Signal, Zeligsoft, Harris IBM RTRT, IPL, LDRA, Virtutech ACE Tao, OIS-Objective Interface Systems (ORBexpress, PCSexpress), RTI (DDS), Visuality (CIFS)

53 Question and Answer Session Thanks! Chip Downing A&D Marketing February 2007