How Can We Trust National Security to Proprietary Software Vendors?
After I pointed out that developers and support personnel that were being hired by commercial embedded Linux companies in China and Russia could be intelligence agents or terrorists, some people asked how they could trust that the developers at proprietary operating system vendors are not intelligence agents or terrorists. There is no need to trust the developers when their work is evaluated in accordance with Common Criteria EAL level 7. The EAL 7 evaluation process will detect any attempt by a saboteur in the development or support team to subvert a national defense system. With EAL 7 operating systems, no one will be able to subvert our nation’s defenses. That is the current standard that proprietary real-time operating systems for future critical defense systems are being held to. Linux should not be allowed to run any national defense systems until someone is prepared to accept the responsibility for certifying Linux to EAL 7. Conclusion Compared to INTEGRITY, Linux is huge, slow,
