Award Data

Memory overwriting vulnerabilities (buffer overflow, format string, double free, integer overflow, etc.) continue to plague commercial and government software, providing avenues for attackers to gain unauthorized control over computer systems. Testing tools are needed that will find vulnerabilities so that fixes can be applied before deployment. Existing vulnerability analyses often rely exclusive ...

Software is a mature discipline, yet more than 98 percent of all PCs have one or more vulnerable programs, and in the US there are 2.7 billion programs open for attack. Efforts to address the problem at the source --during software development--are shockingly inadequate, with many commercial Software Assurance tools focused on detection rather than working to become part of the development process ...

Luna Innovations will design and develop a hard disk unlocking system that is easily usable by forensic technicians while preserving evidentiary integrity. Our solution will be robust even against anticipated future drive features and drives modified by criminals to have certain anti-tamper properties. This is important as it is nearly certain that manufacturers or criminals will develop such coun ...

Wet installation of fasteners offers proven corrosion protection and fuel sealing in aircraft structures, but it''''s a labor-intensive, messy, hazmat-laden process whose quality can vary significantly from fastener to fastener. Under a Navy SBIR Phase II, SMRC has developed a proprietary process called QwikSeal® for pre-coating fasteners with cure-blocked sealant, then overcoating the pre-applie ...

The current generation of advanced static-analysis tools find vulnerabilities by exploring all possible executions of a program as configured for a single platform. The next quantum leap in capability will be a system that will explore all executions for many different platforms simultaneously. We propose to develop such a system by combining a number of state-of-the-art techniques. Novel continuo ...

We propose to build a system that combines novel automatic test generation techniques with state-of-the-art multi-platform continuous integration technology. The proposed system will automatically generate test data by using a combination of symbolic and concrete executions to intelligently explore the space of inputs. The continuous integration technology will enable the system to detect defects ...

As we face new formidable challenges in the area of global asymmetric warfare, the DHS must be able to rapidly train and test those individuals responsible for screening of persons that may wish to bring harm to the U.S. and its allies. Thus there is a vast need to train individuals faster and to improve training outcomes, possibly by training in teams of screeners working together to improve thei ...

This proposal addresses the key issue in the normalization of software assurance information: how to integrate the vulnerability findings reported by multiple vulnerability detection tools. The normalization will provide normalized, consistent reporting on type of identified weakness (alignment with CWE) as well as normalized, consistent reporting on location and trace of identified weakness withi ...

Effective human-animal discrimination happens collectively at all levels of an UGS system. The ability to classify a target from ootsteps alone as human versus non-human given a single modality and sensor is challenging, thus a collaborative network effort increases the system Probability of Detection (Pd) and minimizes Probability of False Alarm (Pfa). IWT proposes leveraging inter-UGS communicat ...

DNA has the potential to provide vast amounts of biometric information. However, the current method of analyzing DNA - which produces biometric signatures from sequences of "junk" DNA called short tandem repeats (STRs) - falls far short of realizing this potential. STR signatures are information-poor and the technology required to produce them is terminally incapable of supporting fast, automated ...