USA flag logo/image

An Official Website of the United States Government

Active Defense Against Code Injection Attacks

Award Information

Agency:
Department of Defense
Branch:
Office of the Secretary of Defense
Award ID:
91395
Program Year/Program:
2009 / SBIR
Agency Tracking Number:
O092-IA1-1015
Solicitation Year:
N/A
Solicitation Topic Code:
N/A
Solicitation Number:
N/A
Small Business Information
Galois, Inc.
421 SW Sixth Avenue Suite 300 Portland, OR 97204-1662
View profile »
Woman-Owned: No
Minority-Owned: No
HUBZone-Owned: No
 
Phase 1
Fiscal Year: 2009
Title: Active Defense Against Code Injection Attacks
Agency / Branch: DOD / OSD
Contract: FA8650-10-M-1761
Award Amount: $99,620.00
 

Abstract:

The threat posed by remote cyber attacks has grown every year, with nation state attacks being the hardest to detect and blunt. A common cyber attack method against remote systems is the code injection attack, where the attacker finds flaws in a remote application then forces the application to execute injected code. Code injection attacks can give the attacker unlimited access to the attacked system and thereby an entryway into a secure network. An attacker will often follow this attack by leaving software that will allow for unlimited future access. Code injection attacks can be very difficult to detect, as they often use program flaws not known to the security community. These attacks continue to be developed to get around current defense mechanisms: signature detection and spectrum analysis. A more general approach of identifying and catching these attacks in progress is needed. We propose investigating a code injection attack detector based on abstract interpretation which would catch new types of attacks before they are publicly known. This detector would be combined with an active defense mechanism that could be configured to block the attacks while allowing a security officer to gather information about the attackers'' methods.

Principal Investigator:

Louis Testa
Project Lead
5036266616
louis@galois.com

Business Contact:

Jodee LeRoux
Contracts
5036266616
jodee@galois.com
Small Business Information at Submission:

GALOIS, INC.
421 SW Sixth Avenue Suite 300 Portland, OR 97204

EIN/Tax ID: 931278540
DUNS: N/A
Number of Employees:
Woman-Owned: No
Minority-Owned: No
HUBZone-Owned: No