The Federal Service for Technical and Export Control concluded with the Institute of System Programming of the Russian Academy of Sciences (EC RAS), a contract for the creation of a technological center for the safety of operating systems created on the basis of the Linux kernel. The contract also implies the creation of a software and hardware complex for the Security System Security Research Center. The amount of the contract is 300 million rubles. Date of completion of work – December 25, 2023.
Among the tasks indicated in the technical lady:
- The formation of the domestic branch of the Linux kernel and providing support for its safety while constant synchronization with international open projects for the development of Linux kernel.
- Preparation of corrections that eliminate vulnerabilities in operating systems created on the basis of Linux kernel and their testing. Bringing these fixes to developers of operating systems.
- Development of the methodology of architectural analysis, static analysis of the source code of the nucleus, the fuzzing testing of the core, systemic and modular testing and complete dynamic analysis. Using prepared methods for testing the Linux kernel software used to create domestic operating systems.
- Preparation of information on vulnerabilities in operating systems created on the basis of the Linux kernel, to include in the Bank’s safety threats to the FSTEC of Russia, identified on the results of analysis and testing.
- Preparation of recommendations for the implementation of measures to safely develop operating systems created on the basis of the Linux kernel.
Targets of the Technology Center:
- Reducing the possible socio-economic consequences from the implementation of computer attacks on the critical information infrastructure of the Russian Federation due to the increase in the level of security of domestic operating systems created on the basis of the Linux kernel;
- improving the quality and unification of domestic operating systems by improving the quality and safety of the Linux kernel;
- Improving domestic means of development and testing software;
- Improving the qualifications of specialists involved in the development of domestic operating systems created on the basis of the Linux kernel;
- Improving the regulatory and methodological support for the processes of safe software development in the Russian Federation.
/Media reports.