USA flag logo/image

An Official Website of the United States Government

Inline Botnet Extraction and Prevention

Award Information

Agency:
Department of Homeland Security
Branch:
N/A
Award ID:
81163
Program Year/Program:
2006 / SBIR
Agency Tracking Number:
611147
Solicitation Year:
N/A
Solicitation Topic Code:
H-SB06.1-008
Solicitation Number:
N/A
Small Business Information
Endeavor Systems, Inc.
1420 Spring Hill Road, Suite 600 Mclean, VA 22102-3006
View profile »
Woman-Owned: Yes
Minority-Owned: Yes
HUBZone-Owned: No
 
Phase 1
Fiscal Year: 2006
Title: Inline Botnet Extraction and Prevention
Agency: DHS
Contract: NBCH060137
Award Amount: $100,000.00
 

Abstract:

Phase I of this project researches a new approach for collecting a higher degree of relevant bot executables by exploiting the infect vector weakness and by utilizing an inline device that both protects systems and captures the bot as it attempts to infect. Most recent botnet research relies on honeynets to collect bots. Reliance on a single collection mechanism, such as honeypots, creates a weakness where attackers can determine targets to avoid. Also, the effectiveness of dark space honeypots in an IPv6 type Internet is unknown. Endeavor proposes a technique that collects and prevents bot malware while infection is attempted against systems, bypassing the dependency on honeypots. Proving the feasibility of extraction in the infection vector in Phase I lays out the foundation for developing the inline botnet extraction and prevention system in phase II. Endeavor has created and operates a commercial decoy sensor grid, FirstLight, which collects and analyzes botnets. We propose leveraging FirstLight including an inline IPS for the proposed research in order to reduce time-to-deployment. The research results will be packaged as a part of our FirstLight commercial offering.

Principal Investigator:

Christopher Jordan
7037286778
jiemin@endeavorsystems.com

Business Contact:

Jiemin Jordan
President
8778884374
cjordan@endeavorsystems.com
Small Business Information at Submission:

Endeavor Systems, Inc.
1420 Spring Hill Road, Suite 600 Mclean, VA 22102

EIN/Tax ID:
DUNS: N/A
Number of Employees:
Woman-Owned: No
Minority-Owned: No
HUBZone-Owned: No