Unlike traditional Type 1 or Type 2 hypervisors (e.g., VMware ESXi), an embedded hypervisor is a lightweight, firmware-level virtualization layer designed for resource-constrained devices (ARM, x86, RISC-V). It allows multiple operating systems (RTOS + Linux + bare-metal apps) to run securely on a single system-on-chip (SoC).
Separation kernel architecture — provides guaranteed resource partitioning (time, memory, peripherals) with minimal overhead. 2. UK Market Drivers | Driver | Explanation | |--------|-------------| | NCSC Zero Trust & Firmware Security | UK National Cyber Security Centre mandates hardware-rooted trust. Embedded hypervisors enable dynamic root of trust measurement. | | Automotive (Zonal Architecture) | UK’s push for connected & autonomous vehicles (CAVs) – hypervisors isolate safety-critical (ISO 26262 ASIL-D) from infotainment systems. | | Industrial Control Systems (ICS) / OT | NCSC guidance on securing legacy ICS – hypervisors add a security monitor without replacing legacy RTOS. | | Defence (MoD) | UK Ministry of Defence requires MILS (Multiple Independent Levels of Security) for drones, combat radios, and naval systems. | | Medical Devices (MHRA) | Class C/D devices need predictable real-time performance + app isolation – embedded hypervisors are replacing monolithic firmware. | 3. Major Vendors Active in the UK | Vendor | Product | UK Presence / Use Case | |--------|---------|------------------------| | Siemens (Mentor Graphics) | Nucleus ReadyStart (embedded hypervisor) | Automotive (JLR, Ford UK R&D); industrial automation. | | Green Hills Software | INTEGRITY Multivisor | MoD programmes, aerospace (Rolls-Royce engine controllers). | | Lynx Software Technologies | LynxSecure (separation kernel) | Defence (Thales UK, BAE Systems); avionics. | | SYSGO | PikeOS | Rail (Siemens Mobility UK), medical, certified ASIL-D / SIL 4. | | Wind River | VxWorks + VxWorks Hypervisor | Legacy energy/utilities in UK (National Grid control systems). | | Kaspersky | Kaspersky Embedded Hypervisor | Industrial IoT security – adopted by some UK water utilities (via integrators). | | Xen Project (open source) | Jailhouse (Linux-based) | Research (University of Cambridge, Arm UK labs); prototyping. |
Unlike traditional Type 1 or Type 2 hypervisors (e.g., VMware ESXi), an embedded hypervisor is a lightweight, firmware-level virtualization layer designed for resource-constrained devices (ARM, x86, RISC-V). It allows multiple operating systems (RTOS + Linux + bare-metal apps) to run securely on a single system-on-chip (SoC).
Separation kernel architecture — provides guaranteed resource partitioning (time, memory, peripherals) with minimal overhead. 2. UK Market Drivers | Driver | Explanation | |--------|-------------| | NCSC Zero Trust & Firmware Security | UK National Cyber Security Centre mandates hardware-rooted trust. Embedded hypervisors enable dynamic root of trust measurement. | | Automotive (Zonal Architecture) | UK’s push for connected & autonomous vehicles (CAVs) – hypervisors isolate safety-critical (ISO 26262 ASIL-D) from infotainment systems. | | Industrial Control Systems (ICS) / OT | NCSC guidance on securing legacy ICS – hypervisors add a security monitor without replacing legacy RTOS. | | Defence (MoD) | UK Ministry of Defence requires MILS (Multiple Independent Levels of Security) for drones, combat radios, and naval systems. | | Medical Devices (MHRA) | Class C/D devices need predictable real-time performance + app isolation – embedded hypervisors are replacing monolithic firmware. | 3. Major Vendors Active in the UK | Vendor | Product | UK Presence / Use Case | |--------|---------|------------------------| | Siemens (Mentor Graphics) | Nucleus ReadyStart (embedded hypervisor) | Automotive (JLR, Ford UK R&D); industrial automation. | | Green Hills Software | INTEGRITY Multivisor | MoD programmes, aerospace (Rolls-Royce engine controllers). | | Lynx Software Technologies | LynxSecure (separation kernel) | Defence (Thales UK, BAE Systems); avionics. | | SYSGO | PikeOS | Rail (Siemens Mobility UK), medical, certified ASIL-D / SIL 4. | | Wind River | VxWorks + VxWorks Hypervisor | Legacy energy/utilities in UK (National Grid control systems). | | Kaspersky | Kaspersky Embedded Hypervisor | Industrial IoT security – adopted by some UK water utilities (via integrators). | | Xen Project (open source) | Jailhouse (Linux-based) | Research (University of Cambridge, Arm UK labs); prototyping. | uk embedded hypervisor software market