Anti-Exploitation Software Protection Systems

Award Information
Agency:
Department of Defense
Branch
Air Force
Amount:
$149,884.00
Award Year:
2012
Program:
SBIR
Phase:
Phase I
Contract:
FA8650-12-M-1393
Agency Tracking Number:
O113-IA1-1154
Solicitation Year:
2011
Solicitation Topic Code:
OSD11-IA1
Solicitation Number:
2011.3
Small Business Information
Siege Technologies, LLC
33 South Commercial Street, Manchester, NH, -
Hubzone Owned:
N
Socially and Economically Disadvantaged:
N
Woman Owned:
N
Duns:
364217468
Principal Investigator:
Joseph Sharkey
Sr. Principal Scientist
(315) 215-1018
joseph.sharkey@siegetechnologies.co
Business Contact:
Sam corbitt
CFO
(774) 219-0056
sam.corbitt@siegetechnologies.com
Research Institution:
Stub




Abstract
State-of-the-art software protection and anti-tamper systems move critical software and data"out-of-band"to the adversary, by using a hypervisor or on"secure"hardware. Unfortunately, the systems running this software are built using untrusted commercial-off-the-shelf (COTS) parts. Supply chain threats to critical components, such as hardware or firmware Trojans, have invalidated the assumption that we can move our critical software and data completely"out-of-band"to the adversary, since the hardware components on which the software ultimately executes is untrusted. As a result, one must re-think the fundamental approach to building software protection and anti-tamper systems. Siege Technologies proposes a methodology and system to address these concerns on a COTS system, or a system composed of COTS parts. Our solution is specifically designed to augment existing software protection mechanisms, shielding them from attack by malicious hardware alterations. The research and systems design conducted in Phase I will shed new light on the problem space and establish new protection capabilities that guard against this threat and enable the system to run protected code in the presence of potentially compromised hardware.

* information listed above is at the time of submission.

Agency Micro-sites

US Flag An Official Website of the United States Government