OpenBSD: Introduction to a Very Secure and Reliable Operating System

Many would know Windows, Mac OSX and Ubuntu. However, have you ever heard about OpenBSD? What will you think if you heard someone mentioned OpenBSD?

Background
OpenBSD is a BSD based operating system, it share similar kernel as FreeBSD. Theo de Raadt created OpenBSD in a disagreement with NetBSD developer, he has different opinion about what an operating system should be. From the day it was born, the primary focus of OpenBSD is about security. Theo de Raadt has a dream to make OpenBSD the most secure operating system in the world. Today OpenBSD has gain recognition as one of the most secure operating system in the world.

Secure by design
OpenBSD earn it's more secure title with proactive auditing. Bugs are the primary source of security vulnerability. Proactive auditing significantly lessen bugs in the OpenBSD code. Proactive auditing is a rare step in operating system development. Most of operating system will focus more on adding more features. Other operating system developers use passive bug fixing. Bug or security vulnerability will get fixed only on reports or incidents. Proactive auditing allows OpenBSD to be more stable, more secure and more reliable than other operating system.

Along with proactive auditing, everything in OpenBSD is designed with security in mind. Every feature that may introduce hole is turned off by default. A novice will have to learn how to enable specific feature and how to enable it securely.

The operating system code also has many self-protection mechanisms to protect against outside attack. Networking code has many protections from any attempt to bring down network. It even designed to withstand an attack and will still work properly. OpenBSD are known to withstand a mass attack. A mass attack would not bring down OpenBSD web server, it would only slow things down without causing another problem.

ProPolice and memory isolation feature prevent fraudulent application from hijacking other application. Each application will have their own isolated process memory and data. OpenBSD do not allow application to access something outside their allocated memory. Attack that rely on hijacking other application will not be able to do its attack. However, as side effect, application with memory allocation bug may not run on OpenBSD. Low quality Linux application has to be audited before it can run on OpenBSD.

Reliability
As another result of secure design, OpenBSD has excellent reliability. Less bug has big contribution to reliability. OpenBSD server are able to be online for years without restarting.

The BSD philosophy also give another big contribution to reliability. BSD developers emphasis on correctness before functionality. Everything must be done in a correct way before adding more function. This is the opposite of what Linux developer do, where functionality is first in the list. Linux has the advantage of the first one to offer new feature. While OpenBSD has the advantage of offering something that work more reliable.

BSD developer also use better code contribution system. Each part of the operating is maintained by a single maintainer. Code integration are done by peoples that understand the system part very well. Careful revised code integration to the existing allow better application reliability. New operating system part version will not introduce an old bug. On Linux, old bug are often resurface on a new version release.

Performance
While performance is not the main focus of OpenBSD, its performance is not too far behind the fastest operating system today. Tight and properly designed code allow OpenBSD to perform well on minimum hardware. OpenBSD performance shine under a heavy load or heavy attack. Lock up or halt are rarely happen because every parts of the operating system will prevent that from happening. Proactive auditing are often fix bug that may cause lock up or halt before they become a problem.

Usability
Because of its strong networking system, OpenBSD are often use as firewall or web server. However, they are not OpenBSD only use. OpenBSD is also a good operating system for desktop. It support many office application. Most application that run on Linux will also be available on OpenBSD.

However, OpenBSD only provide application or driver with license that is compatible with BSD license. This results in less application and driver availability. One of the main disadvantage of OpenBSD for desktop use is its lack of 3D video card support. For user that do not requires 3D application, OpenBSD provide a secure and reliable desktop operating system.

People connect to internet more now. Everyone need the best security to protect their privacy and data safety. While there is no operating system that completely bullet proof, OpenBSD has shown the best effort to reach it. Microsoft or Linux do not have the security feature like what OpenBSD has. It would take many years before Windows or Linux can reach the current state of OpenBSD security. For now OpenBSD is the best choices for user that looking for a secure operating system.