A Trusted Architecture for ESCS with MLS

Past attempts at designing and implementing high trusted systems for embedded safety-critical systems (ESCS) have centered on the concept of a monolithic security kernel and safety kernel. These approaches lead to inflexible, overly complex operating systems that are too large to evaluate at the higher assurance levels. This paper provides an overview of trusted architecture named Hades, which constructs secure systems at the architectural level for the ESCS. The proposed framework supports multi-levels security (MLS), based on the principle of creating separate layers of responsibility and control, with each layer responsible for enforcing its own security policy. This approach can significantly address the dependability of the ESCS with MLS.