Secure Software Components Leveraging the seL4 Microkernel

True Secure SCADAs (TSS) primary technical objective is to develop a set of plans and specifications for building secure software components, in the context of seL4, which can be used to improve the cyber-security of the industrial control systems used in critical infrastructure installations. The resulting plan will identify the modules that are needed for this application and will specify a plan for developing, verifying and testing these modules, along with estimates of effort required for implementation of these modules and the level of security assurance expected. TSS will identify both general-purpose and reusable security modules which can be released under an open-source license, as well as application-specific modules for a security preprocessor for industrial control cyber-security, which will have more restrictive licensing terms. This work will significantly expand on earlier work performed for the Department of Homeland Security for Industrial Control Systems (ICS). In particular, the targeted security application will be a security preprocessor device which was developed and prototyped using the OKL4 micro-kernel for legacy ICS installations. Phase I will include planning of the following: security preprocessor architecture, the software component architecture to support this application, general and specific software components, and the software development and verification methodology.