Interoperability and Usability Enhancements for the Anneal Embedded Hypervisor

The complexity of software in embedded applications from the Internet of Things (IoT) to critical weapons systems has continued to grow. With this growth comes new areas of concern for security and robustness. Specific to security of weapons systems which contain Critical Program Information (CPI), this information must be protected at rest, in motion, and during use. While CPI protection is traditionally considered an anti-tamper function, additional cybersecurity requirements can require specific handling of data (e.g. red/black separation in crypto systems, cross-domain in Multiple Independent Level of Security (MILS) systems). In addition, these security requirements may also need to be balanced with real-time requirements to operate a cyber-physical system. There is an opportunity to bridge the disciplines of cybersecurity, anti-tamper, and real-time systems to enable a new generation of highly secure embedded systems. Missile Defense Agency (MDA) and Department of Defense (DoD) systems deployed in sensitive applications have requirements to protect Critical Program Information (CPI). Anti-tamper systems are commonly used to protect CPI. As the amount of CPI, the complexity of software systems that use the CPI, and the connectivity of the systems containing CPI have increased, additional security threats to CPI must be considered. During the initial Phase II program, Secmation developed Anneal to “build a bridge” between anti-tamper and cybersecurity functions enhancing CPI security and providing a more flexible development capability for systems that must protect CPI. Anneal is a security architecture with a real-time embedded hypervisor with anti-tamper protections. The Anneal Bare-Metal Hypervisor (BMHy) solution bringing technologies in security, real-time, and embedded software design together. Secmation’s Anneal protects CPI and adds cyber-resilience to embedded systems through an innovative hypervisor design philosophy leveraging advanced anti-tamper technologies, hardware security features available in modern processors, and high assurance software architectures. The proposed Second Phase II program will focus on maturation of Anneal, enabling transition to new and existing systems requiring CPI protection. The proposed program will implement specific features needed, such as Open Mission Systems protocol interoperability, for compatibility with MDA and other DoD systems along with elements that will enhance usability of Anneal by developers/integrators. These additional features will lower the cost and risk of adopting Anneal. During the proposed program, a third-party security assessment of Anneal’s capability to meet DoD security requirements for CPI protection will be performed. Additionally, the proposed program will perform an initial design activity to transition Anneal to a low-cost processor to provide a path for cheap implementation of Anneal in existing systems. Approved for Public Release | 25-MDA-12220 (23 Sep 25)