Green Hills Software announced on 17 November 2008 that its INTEGRITY-178B real-time operating system had achieved Common Criteria EAL 6+, High Robustness certification. The National Information Assurance Partnership (NIAP) certificate later issued for the evaluated product identifies INTEGRITY-178B Separation Kernel, version 4.2, on a specific Compact PCI system with a PowerPC 750CXe processor. That distinction matters: the certification is evidence about a defined release and configuration, not a blanket approval for every INTEGRITY product or deployment.
What is Green Hills INTEGRITY-178B?
INTEGRITY-178B is Green Hills Software’s high-assurance real-time operating system (RTOS), built around a separation-kernel design. A separation kernel divides a system into protected partitions so security-critical functions can be isolated and communication between them controlled. The aim is to limit the impact of faulty or malicious code and protect information across those boundaries.
Green Hills describes the architecture as enforcing separation, damage limitation, and information-flow control. Its current INTEGRITY product page presents the RTOS for areas including automotive, secure IoT, avionics, industrial safety, and medical devices: Green Hills INTEGRITY RTOS.
What was the “world’s highest” OS security certification?
In its 17 November 2008 announcement, Green Hills called the result the first operating-system certification at Common Criteria EAL 6+, High Robustness, and the highest Common Criteria security level then achieved for an operating system. That is a dated claim about the certification landscape described by the company at the time, not a timeless ranking of every operating system or a claim about all current INTEGRITY releases. Green Hills’ announcement quoted founder and chief executive Dan O’Dowd calling the certification “a landmark in the security world”: Green Hills’ 17 November 2008 announcement.
#1 Best Overall
- ✅【High-Performance ESP32-S3 Processor】Powered by the ESP32-S3 dual-core Xtensa LX7 processor with up to 240MHz clock speed, this development board features 16MB Flash and 8MB PSRAM. It provides powerful performance for IoT devices, embedded systems, AI applications and advanced DIY projects.
- ✅【Pre-Soldered GPIO Headers for Easy Use】The board comes with pre-soldered GPIO headers, eliminating the need for manual soldering. It can be directly connected to breadboards, sensors and expansion modules, making project setup faster and more convenient for makers and developers.
- ✅【WiFi & Bluetooth 5.0 Wireless Connectivity】Built-in 2.4GHz WiFi and Bluetooth 5.0 enable stable wireless communication for smart home, automation and IoT applications. The reserved IPEX antenna connector allows optional external antenna installation for different project requirements.
- ✅【Large Memory & Flexible Development】With 16MB Flash and 8MB PSRAM, this ESP32-S3 board provides more storage and memory resources for complex firmware, graphical interfaces, OTA updates and data-intensive applications.
- ✅【Arduino IDE, ESP-IDF & MicroPython Support】Compatible with Arduino IDE, ESP-IDF and MicroPython development environments. With dual USB-C interfaces and rich expansion options, it is suitable for robotics, sensors, automation and embedded system development.
The certification was evaluated against the U.S. Government Protection Profile for Separation Kernels in Environments Requiring High Robustness (SKPP). The NIAP certificate assigns the evaluated product an assurance level of EAL 6+, High Robustness. EAL is an assurance rating within the Common Criteria framework; in this case, the protection profile and specified configuration are essential context for understanding what the rating covers.
What exactly did NIAP certify?
The formal certificate names INTEGRITY-178B Separation Kernel, version 4.2, running on a specified Compact PCI card with a PowerPC 750CXe processor. NIAP issued that certificate on 31 January 2011. It applies to the particular version and evaluated configuration—not automatically to a different processor, hardware platform, build, integration, or later release. The certificate also states that it is not a U.S. Government endorsement or warranty. See the NIAP certificate record and the security target and evaluated configuration details.
How the announcement and certificate dates fit together
| Date | What happened |
|---|---|
| 17 November 2008 | Green Hills announced that INTEGRITY-178B had achieved EAL 6+, High Robustness certification. |
| 31 January 2011 | NIAP issued the certificate for INTEGRITY-178B Separation Kernel version 4.2 on the specified Compact PCI/PowerPC configuration. |
| 7 March 2011 | Green Hills announced a second EAL 6+/SKPP High Robustness certification for INTEGRITY-178B version 4, noting ARINC-653 APEX, networking, POSIX, and file-system support. See the 7 March 2011 announcement. |
Is INTEGRITY-178B still certified?
The dated NIAP record establishes certification for the version and configuration named on that record; it does not establish that every current INTEGRITY release or a proposed deployment is covered. Green Hills’ current product page continues to state that INTEGRITY-178 RTOS has been certified to EAL 6+ High Robustness, but procurement or compliance decisions should be based on the current certificate and its exact scope. Check the NIAP record and ask Green Hills Software to confirm whether the intended product version, hardware, and configuration are covered.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.How this differs from safety approvals
Common Criteria EAL 6+ High Robustness is a security assurance result tied to the evaluated product and configuration. It is not interchangeable with safety approvals or standards. Green Hills lists separate credentials such as FAA DO-178B/C DAL A, FDA Class II and Class III medical-device approval, IEC 61508 SIL 3, and automotive ISO 26262 ASIL D on its product page. Those address separate requirements and should not be treated as part of the EAL 6+ certificate.
The Tool Desk
Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →Quick Recap
Rank #4
- CH32V003 Development Minimum System Board for Nano RISC-V CH32V003F4U6 Chip TYPE-C USB 22Pin
- on-board 24MHz Crystal oscillator
- Power by TYPE-C USB
Rank #3
- Powerful Processor for Embedded Systems: The Luckfox Lyra Zero W is powered by the Rockchip RK3506B SoC, featuring a 1.2GHz ARM Cortex-A7 processor, delivering smooth performance for running Linux-based applications and making it suitable for embedded and IoT projects.
- High-Quality Display Interface: The board supports MIPI DSI 2-lane, allowing easy connection to high-resolution displays, ideal for applications like digital signage, HMI systems, and embedded interfaces.
- Extensive Connectivity Options: With USB 2.0 OTG, USB Host 2.0, and GPIO pins, the Lyra Zero W allows connectivity to various peripherals, making it versatile for sensors, devices, and other embedded systems.
- Onboard Wireless Capabilities: Equipped with Wi-Fi 6 and Bluetooth 5.2, the board supports seamless wireless communication, perfect for IoT, networking, and remote control applications.
- Cost-Effective Solution for Development: Offering a budget-friendly price, the Lyra Zero W provides a feature-rich platform for developers to prototype and create advanced embedded systems without exceeding their budget.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
