Countermeasures to Malicious Hardware to Improve Software Protection Systems

Award Information
Agency:
Department of Defense
Branch
Office of the Secretary of Defense
Amount:
$97,697.00
Award Year:
2010
Program:
SBIR
Phase:
Phase I
Contract:
FA8650-11-M-1056
Award Id:
96912
Agency Tracking Number:
O102-IA1-1035
Solicitation Year:
n/a
Solicitation Topic Code:
OSD 10-IA1
Solicitation Number:
n/a
Small Business Information
1207 Cole Rd., Orlando, FL, 32803
Hubzone Owned:
N
Minority Owned:
N
Woman Owned:
N
Duns:
828284856
Principal Investigator:
Sherri Sparks
President
(407) 896-7010
sparks@clearhatconsulting.com
Business Contact:
Sherri Sparks
President
(407) 896-7010
sparks@clearhatconsulting.com
Research Institute:
n/a
Abstract
Security concerns are driving the research and development of innovative techniques designed to detect, prevent, and respond to sophisticated threats in COTS hardware and firmware components. Because of the size and breadth of the attack surface, Clear Hat proposes to limit the scope of their research for this Phase I effort to malicious firmware alterations on disk based storage devices. To date, there has been very little published research evaluating the feasibility, technical implementation, capabilities, and security implications of malicious disk firmware. This is likely due to a lack of publically available documentation about the internal architecture of disk devices as well as a lack of access to functional test cases (e.g. malicious hardware / firmware samples). Clear Hat proposes to take a "hands on" approach to the problem. Using state of the art disk analysis and recovery hardware, Clear Hat will first approach the problem from an offensive angle by attempting to design a disk based Trojan to determine the "real world" capabilities such a trojan would possess. Once these are understood, we will focus on our primary objective of determining the types of practical defenses that are likely to be the most effective against disk based attacks.

* information listed above is at the time of submission.

Agency Micro-sites


SBA logo

Department of Agriculture logo

Department of Commerce logo

Department of Defense logo

Department of Education logo

Department of Energy logo

Department of Health and Human Services logo

Department of Homeland Security logo

Department of Transportation logo

Enviromental Protection Agency logo

National Aeronautics and Space Administration logo

National Science Foundation logo
US Flag An Official Website of the United States Government