Countering Covert Access with SecureCore

Award Information
Agency:
Department of Defense
Branch
Air Force
Amount:
$99,742.00
Award Year:
2009
Program:
SBIR
Phase:
Phase I
Contract:
FA8650-10-M-1766
Agency Tracking Number:
O092-IA2-1135
Solicitation Year:
2009
Solicitation Topic Code:
OSD09-IA2
Solicitation Number:
2009.2
Small Business Information
Assured Information Security, Inc.
245 Hill Road, Rome, NY, 13441
Hubzone Owned:
N
Socially and Economically Disadvantaged:
N
Woman Owned:
N
Duns:
085851181
Principal Investigator:
Joseph Sharkey
Senior Research Scientist
(315) 336-3306
sharkeyj@ainfosec.com
Business Contact:
Barry McKinney
Principal Engineer
(315) 336-3306
mckinneyb@ainfosec.com
Research Institution:
n/a
Abstract
The x86 architecture’s inherent security model has a very large attack surface due to the fact that a large amount of software runs in a privileged level and has unfettered access to critical system state. Software used for data piracy or exfiltration, stealthy execution, malicious alteration of critical information, or control of network end-nodes takes advantage of this large attack surface to develop increasingly complex covert access methods. Countering such advanced attacks requires equally sophisticated techniques to reduce attack susceptibility and ensure trust. To this end, AIS, Inc. will leverage the SecureCore platform, a current AFRL/RI research program, to provide new capabilities that counter various classes of covert access methods. Using SecureCore to mitigate covert access effectively reduces the attack surface of the system. AIS, Inc. has already demonstrated the capability for SecureCore to prevent a number of specific covert access techniques; this effort will examine the feasibility of extending SecureCore to sufficiently address a wide variety of advanced access methods. These findings will lead to new opportunities to protect our systems from new and emerging threats and will pave the way for transition of the technology into a commercial product.

* information listed above is at the time of submission.

Agency Micro-sites

US Flag An Official Website of the United States Government