5

Are there any? What are their names? Are they publicly available/downloadable/installable?

1
  • 4
    Sadly, the only real answer is that there aren't any. It appears to be impossible to mathematically prove that one can ever be that secure. All you can do is aim for "secure enough" and that will depend on requirements. See @Graham's answer for one considered very secure.
    – Rory Alsop
    Commented May 20, 2011 at 7:04

2 Answers 2

12

The OKL4 Verified microkernel has passed the most stringent of Common Criteria evaluation assurance levels (EAL 7). Even this doesn't mean that it's "secure", "100% secure" or "more secure", it just means that it has been formally proved that the microkernel's implementation is compatible with the security model defined by the vendor.

Such a security model will contain assumptions about the environment and mode of operation of the software that may not be consistent with your environment. Taking a different example, when the Target of Evaluation is a commercial operating system the model usually assumes that all of the operators are benign and that any remote system to which the evaluated device is connected will also be consistent with the security model of the ToE.

1
  • 1
    Perfect answer! As a side note, when OSes are evaluated, it's the Trusted Computing Base that gets verified by things like common criteria - not the whole OS. The TCB is the core set of highly privileged functions and security protection mechanisms that are used by all peripheral parts of the OS. The idea is that you're only as secure as your TCB, but that doesn't mean that crazy stuff can't be happening outside of the TCB, only that the evaluation mechanism (like CC) has verified that the TCB is living up to its specs. Commented May 20, 2011 at 17:51
3

How do you quantify 100% secure? No system connected to the Internet is ever 100% secure. Let's also not forget about bugs, exploits, malware, viruses, and so on. The only 100% secure system is one that is unplugged and turned off!

2
  • It's not the right example, but maybe: qubes-os.org/Home.html ? Commented May 20, 2011 at 5:47
  • And people. Dont forget about people, usually these are the biggest vulnerabilities... To reach 100%, you'd need to find a way to neutralize that threat.
    – AviD
    Commented May 31, 2011 at 15:49

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .