You are here

USB Firewall for Direct Connect USB Cyber Warfare Protection

Award Information
Agency: Department of Defense
Branch: Army
Contract: W9113M-11-C-0028
Agency Tracking Number: A102-130-0380
Amount: $69,910.00
Phase: Phase I
Program: SBIR
Solicitation Topic Code: A10-130
Solicitation Number: 2010.2
Solicitation Year: 2010
Award Year: 2010
Award Start Date (Proposal Award Date): 2011-02-02
Award End Date (Contract End Date): 2011-07-31
Small Business Information
727 Airport Boulevard
Ann Arbor, MI 48108
United States
DUNS: 197187602
HUBZone Owned: No
Woman Owned: No
Socially and Economically Disadvantaged: Yes
Principal Investigator
 Chris Lomont
 Research Engineer
 (734) 668-2567
Business Contact
 Charles Jacobus
Title: President
Phone: (734) 668-2567
Research Institution

Malware spreading from unprotected USB ports has been increasing for several years, resulting in a complete ban on using USB external devices on Army computers. As administrators have locked down auto-execute on Windows and other OSes, attackers have changed to spoofing hardware components, opening multiple devices (allowable under USB specs), and even exploiting holes in kernel drivers be sending specially crafted packets to the OS. Most systems provide no protection on the USB ports, assuming that users will not attack their own computer. Cybernet proposes to design and implement a low-cost USB hardware firewall, which will prevent a device from masquerading as undesired device types, and which will validate the USB connection and packets, providing another layer of assurance against malformed packet attacks. On device storage can provide a log of firewall activity, and help in forensic analysis of unknown or untrusted devices. The result of a Phase I effort will be a prototype demonstrating USB passthrough and monitoring for a single device class and blocking of one device class. The result of Phase II will be a TRL 5 device and a production plan.

* Information listed above is at the time of submission. *

US Flag An Official Website of the United States Government