RED BALLOON SECURITY, INC. — Department of Homeland Security SBIR Phase II: H-SB018.1-008
RED BALLOON SECURITY, INC. — SBIR Phase II award from Department of Homeland Security.
Phase II SBIR prototype / development signal
- Phase II is where Department of Homeland Security funds deeper R&D after feasibility. Incumbents with Phase II history are serious competitors on adjacent topics.
- Use this award as past-performance context and to map customer organizations for STRATFI/TACFI-style transition planning.
- Obligated amount $999,797 is consistent with substantial Phase II-scale effort; compare to related awards from the same agency.
- Topic code H-SB018.1-008 links this award to a solicitation family — search the same topic stem for incumbents and recompete timing.
- Amount
- $999,797
- Agency
- Department of Homeland Security
- Program / Phase
- SBIR · Phase II
- Topic
- H-SB018.1-008
- Solicitation
- FY18.1
- NAICS
- —
- Place of performance
- NY
- Period
- 2019-05-01 → 2020-11-01
Description
The firmware running on mobile, embedded, and Internet of things devices is often treated as a blackbox by organizations. These firmware images can contain a myriad of n-day vulnerabilities, both malicious and unintentional backdoors, and other unwanted functionality. Unfortunately, analyzing these firmware images is a difficult and time-consuming task as each firmware can be packed with layers of compression and obfuscation along with specialized operating systems and filesystems. We propose Firmware Automated Analysis at Scale with Testing (FAAST), a technology built on top of Red Balloon Security's FRAK technology, a proprietary framework for unpacking, analyzing, modifying, and packing firmware images. FAAST will integrate additional specialized FRAK analyzers and utilize FRAK's client server architecture to automatically unpack and analyze firmware images returning human and machine readable reports back to the user.