The Federal Service for Technical and Export Control signed a contract with the Institute for System Programming of the Russian Academy of Sciences (ISP RAS) to create a technology center for researching the security of operating systems based on the Linux kernel. The contract also includes the creation of a software and hardware complex for the operating systems security research center. The contract amount is 300 million rubles. Completion date is December 25, 2023.
Among the tasks specified in the terms of reference:
- Formation of a domestic branch of the Linux kernel and ensuring its security support while constantly synchronizing with international open projects for the development of the Linux kernel.
- Preparing patches that eliminate vulnerabilities in operating systems based on the Linux kernel and testing them. Bringing these fixes to operating system developers.
- Development of a methodology for architectural analysis, static analysis of the kernel source code, kernel fuzzing testing, system and unit testing, and full-system dynamic analysis. Application of prepared methods for testing Linux kernel software used to create domestic operating systems.
- Preparation of information about vulnerabilities in operating systems created based on the Linux kernel for inclusion in the database of information security threats of the FSTEC of Russia, identified as a result of analysis and testing.
- Preparation of recommendations for the implementation of measures for the secure development of operating systems based on the Linux kernel.
Goals of the Technology Center:
- Reduction of possible socio-economic consequences from the implementation of computer attacks on the critical information infrastructure of the Russian Federation by increasing the level of security of domestic operating systems created on the basis of the Linux kernel;
- Improving the quality and unification of domestic operating systems by improving the quality and security of the Linux kernel;
- Improvement of domestic software development and testing tools;
- Advanced training of specialists involved in the development of domestic operating systems based on the Linux kernel;
- Improving the regulatory and methodological support for secure software development processes in the Russian Federation.
Source: opennet.ru