The proliferation of the Linux open source operating system through a growing number of U.S. defense systems, poses a 'serious and urgent security threat', Dan O'Dowd, CEO of Green Hills Software, said last week in a speech to the Net-Centric Operations Industry Forum in McLean, VA.
The basis of the claims made by Green Hills ' an OS provider for 32- and 64-bit embedded systems ' lies in the fact that Linux is being developed by an open source process, which according to O'Dowd is a cooperative effort ruled by a 'loose association' of software developers from all over the world.
"The very nature of the open source process should rule Linux out of defense applications. Open Source procedures violate every principle of security. It welcomes everyone to contribute to Linux. Now that foreign intelligence agencies and terrorists know that Linux is going to control our most advanced defense systems, they can use fake identities to contribute subversive software that will soon be incorporated into our most advanced defense systems," said O'Dowd.
Linux software, including contributions from Russia and China, is spreading rapidly through the Defense Department because it can be freely downloaded from the Internet without a license agreement or up-front fees, bypassing legal, purchasing and security procedures. A recent survey conducted over a two-week period by the Mitre Group, found 251 Department of Defense deployments of Linux and other open source software.
Linux has been selected to control the functionality, security and communications of critical defense systems including the Future Combat System, the Joint Tactical Radio System and the Global Information Grid.
"If Linux is compromised, our defenses could be disabled, spied on or commandeered. Every day new code is added to Linux in Russia, China and elsewhere throughout the world. Every day that code is incorporated into our command, control, communications and weapons systems. This must stop," O'Dowd said.
Full Article