Information Assurance Run-time Auditing (IARA)

Award Information
Agency:
Department of Defense
Amount:
$99,994.00
Program:
STTR
Contract:
FA9550-06-C-0048
Solitcitation Year:
2006
Solicitation Number:
N/A
Branch:
Air Force
Award Year:
2006
Phase:
Phase I
Agency Tracking Number:
O064-SP2-1014
Solicitation Topic Code:
OSD06-SP2
Small Business Information
SENTAR, INC.
4900 University Square, Suite 8, Huntsville, AL, 35816
Hubzone Owned:
N
Woman Owned:
N
Socially and Economically Disadvantaged:
N
Duns:
174265736
Principal Investigator
 Leigh Flagg
 Senior Science Analyst
 (256) 430-0860
 lflagg@sentar.com
Business Contact
 Peter Kiss
Title: CEO
Phone: (256) 430-0860
Email: pkiss@sentar.com
Research Institution
 UNIV. OF TULSA
 R. F Gamble
 600 S. College Avenue
Tulsa, OK, 74104
 (918) 631-2988
 Nonprofit college or university
Abstract
Capabilities of large-scale software intensive systems such as those of interest to the Software Producibility Initiative are built incrementally within the overarching infrastructure. This requires frequent updates/extensions to integrate processes and to ensure expedient, fault tolerant, secure and robust operations. The potentially widespread impact made by incorporation of new capabilities coupled with the criticality of system operations may dictate incorporation of untrusted components without strict a prior verification. However, technologies to monitor, control, and verify discrete run-time software components are the subject of on-going research and development. They provide software monitoring at different granularities (i.e. network, operating system and application level) and sometimes for a distinct type of domain. While many of these technologies have gained a level of maturity and acceptance for host-level systems, there is currently limited research underway to substantiate their applicability to large scale software intensive systems on which there are unique quality constraints, and within which there is vast heterogeneity components, and interaction processes. To this end, Sentar and the University of Tulsa propose the Information Assurance Run-time Auditing (IARA) concept as a framework to promote the specification of software system monitoring, audit, analysis and threat mitigation capabilities in large scale software intensive systems.

* information listed above is at the time of submission.

Agency Micro-sites

US Flag An Official Website of the United States Government