Basic concepts of KasperskyOS
KasperskyOS-based solution
A KasperskyOS-based solution consists of a kernel, security module, and applications and system software integrated for operation within a software/hardware system. In KasperskyOS, processes are called entities. The kernel guarantees that entities are isolated and can interact only through the kernel (using system calls). Each entity in a solution has a static description, which defines the interfaces available to other entities. The specialized languages EDL, CDL and IDL are used to describe interfaces.
Cyber immune approach
A cyber immune approach is used to develop secure KasperskyOS-based solutions. This approach relies on choosing a way to divide the system into entities and setting certain rules governing their interactions (a solution security policy). A security policy is implemented by the Kaspersky Security Module, which is included in the solution.
The cyber immune approach lets you protect trusted components of the system and minimize its attack surface. Even if one component in such a system is compromised, the remaining components will continue to perform security functions.
Details about the cyber immune approach
Kaspersky Security System
Kaspersky Security System technology lets you develop and implement various security policies. Moreover, you can combine several security models, add your own models, and flexibly configure the rules for entity interactions. The specialized language PSL is used to formally describe a solution security policy. A Kaspersky Security Module for use in a specific solution is generated based on the PSL description.
KasperskyOS Community Edition
KasperskyOS Community Edition contains tools for developing secure KasperskyOS-based solutions, including:
- Image of the KasperskyOS kernel
- The NK compiler which is designed to generate the Kaspersky Security Module and auxilliary transport code
- Other tools for solution development (GCC compiler, GDB debugger, binutils toolset, QEMU emulator, and accompanying tools)
- A set of libraries that provide partial compatibility with the POSIX standard
- Components of KasperskyOS Community Edition
- Documentation
- Examples of basic KasperskyOS-based solutions