IIC Journal of Innovation 20th Edition Trustworthy July 2022, 20th Edition | Page 90

Accelerating Time-to-Market

1 INTRODUCTION

The cost to design , build , verify , and certify high assurance systems will rapidly exceed time and budget targets . This can add thousands or tens of thousands of hours of additional effort ; and , for the highest levels of certification , exceed $ 100 per line of code . ( CITE ) These costs can be mitigated by building upon a high assurance software stack foundation that is already verified / certified . As a result , the software certification needed will be limited to the application code that you develop .
With support from DARPA , Real-Time Innovations ( RTI ) has been working in the area of formallyverified microkernels and software certification frameworks for the last six years . Our focus has been on exploring software architectures and technologies that will accelerate time to market for high assurance systems . Our software stack is built upon open-source technology based upon the formally-proven seL4 microkernel , and a data-centric communications technology using Object Management Group ’ s Data Distribution Service ( OMG DDS ). The working implementations we will discuss are using Hensoldt Cyber ’ s TRENTOS ( a commercial operating system implementation on top of seL4 ), and RTI Connext Cert ( a certifiable commercial software framework that is OMG DDS-compliant ).
We walk through multiple software architectures that utilize this software stack , and present performance results from our reference implementations .
The purpose of this document is to present the details , use cases , and discusses performance of a high assurance software stack to expose readers to issues and challenges before starting their own efforts . We share a cost-effective approach to accelerate the design and implementation of their systems by building upon a high assurance stack ( seL4 and OMG DDS ). This paper provides the rationale , explains a software stack and outlines multiple software architectures that use it . This should be useful to IOT architects , developers , integrators , and safety / security assurance personnel .

2 MOTIVATION

The process of building trustworthy and high assurance systems is complex , costly , and requires significant expertise . The end goal is to create a complete software-hardware solution whose components , both individually and collectively , meet your customers ’ required levels of assurance for safety and security . This will vary depending upon the standards that are required . For example , RTCA DO-178C 1 for flight safety airworthiness , and ISO 26262 for autonomous vehicles . Within each of these , there are multiple levels of certification corresponding to the
1
See standards , certification companies , and software references at the end of the paper . Journal of Innovation 85