Detecting Malicious Code In Firmware

Award Information
Agency:
Department of Defense
Branch
Air Force
Amount:
$749,996.00
Award Year:
2002
Program:
SBIR
Phase:
Phase II
Contract:
F30602-02-C-0051
Agency Tracking Number:
011IF-0705
Solicitation Year:
n/a
Solicitation Topic Code:
n/a
Solicitation Number:
n/a
Small Business Information
Grammatech, Inc.
317 N. Aurora Street, Ithaca, NY, 14850
Hubzone Owned:
N
Minority Owned:
N
Woman Owned:
N
Duns:
603978321
Principal Investigator:
Paul Anderson
Senior Software Engineer
(607) 273-7340
paul@grammatech.com
Business Contact:
Ray (Tim) Teitelbaum
Chairman
(607) 273-7340
tt@grammatech.com
Research Institution:
n/a
Abstract
"Malicious code is code that has been intentionally added to or changed in a software system with the intention of causing harm, or subverting the intended function of the system. Most digital electronic equipment is controlled by firmware. Firmwarepresents a tempting target to an attacker because of its ubiquity, the potential efficacy of an attack, and relatively low investment requirements. Traditional efforts at security analysis have naively assumed that the firmware is in the trusted-computingbase. We propose the development of a tool that uses a deep-structure representation of programs to help statically find occurrences of malicious code in firmware. The tool will be semi-automatic. When suspicious code is found, an analyst can bedirected to its location, and provided with all the available static-analysis information to help make the final determination. The main challenge is to conduct research into techniques for increasing the precision of the dependence graph representationof machine-code programs. This is necessary to reduce the number of false-positive results from the analysis. The tool will have multiple uses in many domains, including program understanding, forensics, assurance and decompilation; and will beapplicable not only to firmware, but also to any machine-code program."

* information listed above is at the time of submission.

Agency Micro-sites


SBA logo

Department of Agriculture logo

Department of Commerce logo

Department of Defense logo

Department of Education logo

Department of Energy logo

Department of Health and Human Services logo

Department of Homeland Security logo

Department of Transportation logo

Enviromental Protection Agency logo

National Aeronautics and Space Administration logo

National Science Foundation logo
US Flag An Official Website of the United States Government