Safety Critical Products


For embedded software designers of safety critical applications with multiple levels of safety criticality Green Hills Software offers a commercially supported, single-vendor solution that doesn’t compromise the integrity of their highest safety level program. This entire line of safety critical products enables system designers to truly benefit from today’s advanced embedded processor technologies by incorporating state-of-the-art software development tools and modern run-time systems. Green Hills Software’s single source solution includes a securely partitioned real-time operating system fully supporting ARINC 653, Ada 95 runtimes, DO-178B, Level A certification packages, and a state-of-the-art software development environment, AdaMULTI™, which supports both Ada 95 and C/C++ development.

Safety Critical software, DO-178B, ARINC 653, MILS, EAL 6+ Safety Critical, Secure Partitioning
DO-178B Level A Certification

DO-178B provides the aviation community with guidelines for developing software for airborne systems and equipment that complies with accepted airworthiness requirements. Of the five software levels (A through E), Level A is the most stringent. The effort required to show compliance with the certification requirements for DO-178B is based on the associated failure condition category for each level, where failure of a Level A system would result in a catastrophic failure condition, preventing continued safe flight or landing.

Do-178B, Safety Critical software, DO-178B, ARINC 653, MILS, EAL 6+ Safety Critical, Secure Partitioning In the past, Safety Critical software systems with multiple levels of safety criticality have been deployed on federated systems, where each function executes on a dedicated processor. The need to lower maintenance costs and reduce the size/weight/power of older embedded computer systems, along with the availability of modern processor technology, has spurred demand for a commercial run-time system that permits multiple programs at different safety levels to execute on a single processor. In addition, the run-time system must be certifiable to a level of criticality as high or higher than that of any program running on the processor.

The cost to test and verify safety-critical software is directly proportional to the software level. The higher the software level, the more complex and expensive the development and verification process. The most economical and architecturally ideal single processor solution is to develop and verify only those programs that operate at the highest software level to the complete set of process objectives. The programs or functions that operate at lower software levels would then need to meet reduced set of process objectives. This method is valid as long as the run-time system guarantees that any failure resulting from a defect in a program operating at a lower software level CAN NOT, under any circumstance, disrupt the operation of the higher software-level functions. The run-time system must guarantee protection in both the space and time domains.


» More on INTEGRITY-178B

  • Green Hills Safe-Tasking Ada Run-Time
  • Bare target or integrated with INTEGRITY-178B
  • Ravanscar Profile compliant
  • RMA support
  • DO-178B Level A certification package

» More on GSTART

  • Green Hills Minimal Ada Run-Time
  • Bare target or integrated with INTEGRITY-178B
  • SPARK profile compliant - no tasking
  • DO-178B Level A certification package

» More on GMART

  • Mixed Language Ada and C/C++ Support
  • Commercially Supported Solution
  • Single Vendor Support
  • DO-178B Level A certification package
  • Protection in the Time and Space Domains

» More on AdaMULTI

  • Object Code Analyzer

» More on G-Cover

© 1996-2017 Green Hills Software Trademark & Patent Notice