Efficient Code Certification for Open Firmware

Award Information
Agency:
Department of Defense
Branch
Defense Advanced Research Projects Agency
Amount:
$0.00
Award Year:
2001
Program:
SBIR
Phase:
Phase I
Contract:
DAAH0102CR080
Award Id:
55463
Agency Tracking Number:
00SB2-0073
Solicitation Year:
n/a
Solicitation Topic Code:
n/a
Solicitation Number:
n/a
Small Business Information
33 Thornwood Drive, Ithaca, NY, 14850
Hubzone Owned:
N
Minority Owned:
N
Woman Owned:
N
Duns:
101321479
Principal Investigator:
Matthew Stillerman
Principal Scientist
(607) 257-1975
matt@oracorp.com
Business Contact:
Richard Smith
Controller
(607) 257-1975
rick@oracorp.com
Research Institution:
n/a
Abstract
Maliciously constructed boot firmware is a threat to our information infrastructure that has largely been ignored. Boot firmware controls the power-up procedure initializing a computer's hardware and loading its run-time system. This code, embedded inall third-party peripheral devices, can easily be corrupted and then exploited to undermine security engineering at the operating system, protocol, application, or enterprise levels. Authentication techniques (e.g., digital signatures) provide limitedprotection by ensuring the provenance of the firmware. This Phase II effort will develop and implement an alternative technique, Efficient Code Certification (ECC), that can establish the trustworthiness of code regardless of its origin. Our BootSafeverifier, based on ECC, will verify the safety of all boot firmware (before it is run) every time a system is booted. This verification relies on a certifying compiler that produces particularly well-structured code, so that a verifier can analyze itstatically. The user need only trust the verifier, a program that can be persuasively validated by inspection. By applying ECC to boot firmware based on the widely used Open Firmware standard (IEEE-1275) we can provide an effective countermeasure topotentially devastating attacks.

* information listed above is at the time of submission.

Agency Micro-sites


SBA logo

Department of Agriculture logo

Department of Commerce logo

Department of Defense logo

Department of Education logo

Department of Energy logo

Department of Health and Human Services logo

Department of Homeland Security logo

Department of Transportation logo

Enviromental Protection Agency logo

National Aeronautics and Space Administration logo

National Science Foundation logo
US Flag An Official Website of the United States Government