USA flag logo/image

An Official Website of the United States Government

Winning the 'Race to the Bottom' by Changing the Rules: Inhibiting Malicious…

Award Information

Agency:
Department of Defense
Branch:
Office of the Secretary of Defense
Award ID:
96911
Program Year/Program:
2010 / SBIR
Agency Tracking Number:
O102-IA1-1019
Solicitation Year:
N/A
Solicitation Topic Code:
OSD 10-IA1
Solicitation Number:
N/A
Small Business Information
Galois, Inc.
421 SW Sixth Avenue Suite 300 Portland, OR 97204-1662
View profile »
Woman-Owned: No
Minority-Owned: No
HUBZone-Owned: No
 
Phase 1
Fiscal Year: 2010
Title: Winning the 'Race to the Bottom' by Changing the Rules: Inhibiting Malicious Hardware Activation through Attack Incompatibility
Agency / Branch: DOD / OSD
Contract: FA8650-11-M-1058
Award Amount: $99,593.00
 

Abstract:

Many hardware trojans depend on (a) the ability of an attacker to have an accurate model of the target system and of key software used on that system and (b) identification of one or more deterministic trigger conditions with low observability (i.e., conditions that evade detection by traditional scan- or ATPG-based testing methodologies but that can be exercised on demand via external stimuli). We call this class of trojans deterministic, externally-triggered (DET) trojans. This work introduces a class of software-based general purpose countermeasures to the DET class of trojans. We propose a set of tools by which the software engineer can transform the source code of system & application software to automatically obfuscate communication channels. The tools take as input two things: (a) the source code of communicating software components, and (b) a specification of obfuscating transformations on the communication; from these is generated the transformed source code. The resulting system does not adhere to the behavioral model assumed when building the trojan. Thus an adversary's assault is rendered less effective via "attack incompatibility": trigger conditions have been altered such that the malicious behavior cannot be reliably instigated.

Principal Investigator:

David Burke
Principal Investigator
5038087175
davidb@galois.com

Business Contact:

Anne M. McClaran
Contracts Administrator
5038087203
anne@galois.com
Small Business Information at Submission:

Galois, Inc.
421 SW Sixth Suite 300 Portland, OR 97204

EIN/Tax ID: 931278540
DUNS: N/A
Number of Employees:
Woman-Owned: No
Minority-Owned: No
HUBZone-Owned: No