You are here

Autonomous Detection and Healing of Silent Vulnerabilities

Award Information
Agency: Department of Homeland Security
Branch: N/A
Contract: 70RSAT19C00000057
Agency Tracking Number: HSHQDC-14-R-00035-H-SB014.2-002-0004-II2
Amount: $999,995.23
Phase: Phase II
Program: SBIR
Solicitation Topic Code: H-SB014.2-002
Solicitation Number: HSHQDC-14-R-00035
Timeline
Solicitation Year: 2014
Award Year: 2019
Award Start Date (Proposal Award Date): 2019-09-30
Award End Date (Contract End Date): 2021-09-29
Small Business Information
28 Dana Street, Amherst, MA, 01002-0000
DUNS: 102221665
HUBZone Owned: N
Woman Owned: N
Socially and Economically Disadvantaged: N
Principal Investigator
 Kristopher Carver
 Technical Director
 (413) 359-0599
 kris@bluerisc.com
Business Contact
 Sylvia Moritz
Title: VP of Finance & Operations
Phone: (617) 517-6324
Email: sylvia@bluerisc.com
Research Institution
N/A
Abstract
BlueRISC's proposed solution provides a fundamentally new approach to automated embedded software/firmware analysis relying on a novel cross-binary/firmware differential exploitability analysis framework. The solution is able to identify newly added potentially exploitable paths associated with zero/n-day vulnerabilities, characterize new functionality with respect to its potentially malicious nature while also providing reporting and visualization with respect to the updated attack surfaces of the firmware during the software development lifecycle. The solution is CPU and operating system agnostic and thus widely applicable. Initial sectors that will be targeted include government and defense as well as commercial verticals such as the automotive and energy/critical infrastructure industries.

* Information listed above is at the time of submission. *

US Flag An Official Website of the United States Government