You are here

RAfFLES: Ransomware-Aware Flash-basEd Storage

Award Information
Agency: Department of Defense
Branch: Army
Contract: W911NF-19-P-0023
Agency Tracking Number: A18B-010-0237
Amount: $150,000.00
Phase: Phase I
Program: STTR
Solicitation Topic Code: A18B-T010
Solicitation Number: 18.B
Solicitation Year: 2018
Award Year: 2019
Award Start Date (Proposal Award Date): 2018-12-17
Award End Date (Contract End Date): 2019-06-16
Small Business Information
15400 Calhoun Drive Suite 190
Rockville, MD 20855
United States
DUNS: 161911532
HUBZone Owned: No
Woman Owned: Yes
Socially and Economically Disadvantaged: No
Principal Investigator
 Gregory Briskin
 Associate Director
 (301) 294-4755
Business Contact
 Mark James
Phone: (301) 294-5200
Research Institution
 The Pennsylvania State University
 Dr. Peng Liu Dr. Peng Liu
E330 Westgate Building
University Park, MD 16802
United States

 (814) 863-0641
 Nonprofit College or University

Ransomware is an international crime operation that strikes commercial, public and government organizations. It is estimated that ransomware has cost nearly $5 billion in damages worldwide in 2017 alone, and if left unmitigated, by 2019 will hit an enterprise every 14 seconds causing a projected total loss of $11.5 billion. The IAI team proposes to take advantage of the intrinsic flash properties and build a ransomware-tolerant flash-based storage which has a lightweight hardware-assisted data recovery system. Such firmware-level recovery system allows quick and effective recovery from encryption ransomware without relying on explicit backups. It is transparent to upper-level systems software and applications, and the proposed techniques have sufficiently low-performance overhead and can be adopted in a variety of computing platforms and storage mediums such as solid-state drive (SSD), embedded multimedia card (eMMC), and USB sticks. The solution ensures isolated data recovery even on OS-compromised computer systems and utilizes the internal parallelism provided by flash-based storage devices to dramatically reduce the time of recovering user data. Our approach does not require any code modifications to the existing file systems and applications, hence it can be easily deployable in a variety of computing platforms such as servers, desktops, and even mobile devices.

* Information listed above is at the time of submission. *

US Flag An Official Website of the United States Government