LynxSecure

LynxSecure 5.0

Using new hardware technologies, the new version of this popular product increases performance of completely virtualized guest OS and also is capable to provide virtualization of 64-bit guest OS and guest OS with support of symmetric multiprocessing (Symmetric Multi-Processing – SMP).

With an exit of the second generation of the Intel processors Core i7 and i5 the Intel platform made quantum leap on the new level of opportunities and productivities. Thanks to cooperation with Intel company, support of these microprocessors was implemented in the fifth version of LynxSecure also quickly as it was made also in previous, the fourth, the version of a hypervisor.

In the fifth version of LynxSecure there was a function of sharing of devices addressed to systems with limited number of physical hardware. This function supplements the existing mechanism of direct purpose of devices familiar to users of the previous versions of LynxSecure. Thanks to the built-in hypervisor of LynxSecure 5.0, the advanced technologies of virtualization which are applied in defense, medical and aviation segments to security of responsible applications reach the corporate level where they will ensure safety of client virtualization, sharing of resources (multi-tenancy) and the periphery.

Program virtualization is usually used on servers in the IT centers for receiving a number of advantages among which consolidation of the equipment, simplicity of administration and ensuring support of legacy applications. At the same time for the built-in systems and client applications virtualization traditionally was excessive because of their low capacity and small number of physical devices. With the advent of a core of separation of LynxSecure 5.0 many of these restrictions consign to the past. The new mechanism of safe virtualization of devices which cornerstone the technology of the protected sections of LynxSecure is provides virtualization of limited number of hardware units with a possibility of a joint appeal to them of different guest OS. LynxSecure of policy of interaction of sections provided in a hypervisor optimize performance of network, interface, disk, graphic and other shares thanks to what delights of safe virtualization become available to systems with limited resources like portable computers and the built-in devices.

The key factor defining convenience of use of technologies of safe virtualization on client devices is performance of OS and applications in the virtualized system. Thanks to a set of the improvements directed to optimization of the virtualizing functions, the core of separation of LynxSecure 5.0 allows completely virtualized OS and their applications to work almost without loss productivities. Completely virtualized operating systems with the application software are started in the sections in an unmodified type. Use of the latest processor Intel Core technologies of the second generation along with key technologies of Intel, such as EPT (Extended Page Tables), PAT (Page Attribute Table) and AVX (Advanced Vector Extensions), allows a hypervisor to reach the speed of work of the virtualized OS only for several percent of OS, different from high-speed performance of data, in the normal mode. It means that specialists can use LynxSecure hypervisor for increase in security of the systems without noticeable decline in production and functionality.

One more key innovation which appeared in the built-in hypervisor of LynxSecure 5.0 is a possibility of start of completely virtualized 64-bit guest OS with support of symmetric multiprocessing. Now the 64-bit Windows 7, Linux and Solaris operating systems can safely use more than one core. Along with performance improvement it allows developers to start with hardly any trouble at all commercial OS and the application software, OSRV and legacy applications on one hardware platform. As a result of several different physical systems it is possible to integrate in one, based on the modern Intel Core multi-core processor.

Combination of two and more different operating systems on one equipment gives huge economy of costs for hardware and service maintenance. Besides, there is a possibility of creation of the innovation multi-function printers from several OS.

The isolated access of applications and OS to system resources and the periphery is very important in terms of security. Allowing to receive the isolated sections which limits interfere with interaction between the operating systems and application programs placed in these sections, the hypervisor of LynxSecure creates conditions for start of multiple applications and different guest OS on one hardware platform without prejudice to security. Such peripheral devices as the keyboard, the monitor and a mouse, can be shared by several guest OS or to be appointed any one guest OS. In a similar way of the database, drives, network, USB interfaces and a sound subsystem can be configured either as the general or as belonging to some one certain operating system or the application.

Version 5.0 of a core of separation of LynxSecure began to support energy saving processors from the Intel Atom family, having made advantages of safe virtualization available to developers of the economic mobile and built-in devices. LynxSecure 5.0 allows to use one - and dual core modifications of 32-bit CPUs of the Intel Atom e6xx and e5xx series for safe execution of OSRV LynxOS and Linux OS on one platform.

The delivery of LynxSecure 5.0 includes the latest version of integrated development environment of Luminosity. These tools contain powerful tools of development, debugging and analysis and are based on Eclipse technology. The full support of development of images for LynxSecure 5.0 hypervisor and also various guest OS is provided in version 4.7 of the Luminosity environment. The packet of Luminosity 4.7 allows to configure quickly and easily LynxSecure hypervisor, to appoint devices to specific operating systems (to normal Linux and Windows, OSRV LynxOS-SE OS, etc.) and to create the loaded images. Through Luminosity the developer can load and start a hypervisor of LynxSecure 4.0 and guest operating systems and to debug the performed applications. In the environment of Luminosity masters (wizards) helping beginners to perform configuring using the new autoconfiguration utility working at a direct system are provided. In addition the optimized version of a packet of Luminosity for start on the target platform containing the utility for its automatic configuring and designed specially under needs of IT administrators will be included in the delivery.

As well as operating systems of LynuxWorks company, a core of separation and the built-in hypervisor of LynxSecure is based on open standards. Clients of LynuxWorks can switch to a core of separation of LynxSecure 5.0 without problems and start then Linux - and POSIX-applications in the isolated sections under virtualized by Red Hat Linux and LynxOS OS. Version 5.0 of the built-in hypervisor and core of separation of LynxSecure with support of the Intel processors Core of the second generation and Intel Atom is available since March, 2011.

LynxSecure 4.0

Company LynuxWorks, Inc. announced in August, 2010 release of the new version of a core of a separation/hypervisor of LynxSecure, the built-in software product for virtualization. The version of LynxSecure 4.0 supports processor lines of Intel Core i7 and Intel Core i5, allows to create new configurations of guest OS and is more complete realizes the potential of multi-core processors. The hypervisor of LynxSecure of version 4.0 provides support of symmetric multiprocessing (Symmetric MultiProcessing – SMP) for guest operating systems and higher performance at start of multiple guest OS on the new multi-core processors Intel Core i7/i5.

Software of safe virtualization from LynuxWorks company is widely used for application development in the key defense programs making greatest demands on software solutions. With not smaller success of LynxSecure it is applied by developers of network equipment, consumer and automobile electronics, the industrial systems, the medical equipment. Providing creation of the isolated "sections" interfering interaction between the operating systems and their application programs placed in these sections the hypervisor of LynxSecure allows to start multiple applications and different guest OS on one hardware platform without prejudice to security. Using LynxSecure in combinations with multi-core processors, developers can equip one physical system with functions of two and more separate systems that considerably reduces cost value of the equipment, simplifies its service and saves space.

For the defense applications requiring the maximum security, the hypervisor of LynxSecure acts as the entrusted platform standardized multidomain allowing to start applications of different reliability on one hardware platform. Founders of LynxSecure developed the product, being guided by achievement of the highest levels according to the Common Criteria standard (Common Criteria for Information Security Technology Evaluation is general criterions for assessment of information technology security).

The core of separation of LynxSecure 4.0 allows developers to start as the paravirtualized guest OS and OSRV, such as Linux or LynxOS, for achievement of high performance, and completely virtualized unmodified OS (for example, the Microsoft Windows families) for ensuring full compatibility. On multi-core processors one guest OS can use any core together with other OS and is undivided use the core appointed by it or (the innovation which appeared in version 4.0) to work in the mode of a symmetric multiprotsessornost assuming access to several cores.

Relying on hardware functions of virtualization of the Intel processors Core i7, the hypervisor of LynxSecure ensures functioning of guest operating systems almost without loss of performance. Thanks to this core of separation such OS as Windows, can work much quicker, than when using other solutions which cornerstone the traditional layer of emulation is. Besides, in LynxSecure there is a built-in support of virtual networks thanks to which Windows applications can easily interact under protocols of TCP/IP with another virtualized by OS (for example, Linux) started in other sections. This mechanism of interaction of sections is fast, safe and is implemented only by means of LynxSecure, i.e. does not require making changes in system and the application software.

The delivery of LynxSecure 4.0 includes the latest version of integrated development environment of Luminosity. These tools contain powerful tools of development, debugging and analysis and are based on the Eclipse technology which became the standard. In the version of Luminosity 4.7 there was a full support of development of images for LynxSecure 4.0 and also support of different guest OS. The packet of Luminosity 4.7 allows to configure quickly and easily LynxSecure separation core, to appoint devices to certain OS (Linux, Windows, OSRV LynxOS-SE, etc.) and to create the loaded images. Having started a hypervisor of LynxSecure 4.0 and guest OS, using Luminosity the developer can debug applications. In the environment of Luminosity masters (wizards) helping new users to perform configuring of a final system are also provided.

As well as operating systems of LynuxWorks company, a separation core / the built-in hypervisor of LynxSecure is based on open standards. Clients of LynuxWorks can switch to a hypervisor of LynxSecure 4.0 without problems and start then Linux - and POSIX-applications in the isolated sections under control of the virtualized Red Hat Linux and LynxOS OS.