GALOIS, INC. — Department of Defense SBIR Phase II: AF203-CSO1
GALOIS, INC. — SBIR Phase II award from Department of Defense.
Phase II SBIR prototype / development signal
- Phase II is where Department of Defense funds deeper R&D after feasibility. Incumbents with Phase II history are serious competitors on adjacent topics.
- Use this award as past-performance context and to map customer organizations for STRATFI/TACFI-style transition planning.
- At $1,799,831, this is a large obligation for typical SBIR Phase sizing — worth reviewing for scope breadth and teaming opportunity.
- Topic code AF203-CSO1 links this award to a solicitation family — search the same topic stem for incumbents and recompete timing.
- Amount
- $1,799,831
- Agency
- Department of Defense · Defense Advanced Research Projects Agency
- Program / Phase
- SBIR · Phase II
- Topic
- AF203-CSO1
- Solicitation
- X20.3
- NAICS
- —
- Place of performance
- OR
- Period
- 2023-07-31 → 2025-08-21
Description
The objective of this study will be to develop technologies for recompiling legacy binaries to the secure CHERI ISA in support of DoD modernization priorities. Doing this would enable upgrading DoD systems processors and software by ruling out several important categories of security vulnerability that are possible on legacy architectures. However, recompilation is inherently a very difficult task, because CHERI binaries require metadata called capabilities, which are checked at run-time and alter the assembly code as well as the data layout. Recompiling a legacy binary to CHERI means reconstructing the logic of the original binary and inferring the capabilities necessary to ensure it runs safely. The current state of technology is that binary recompilation to emerging platforms such as CHERI is impossible, even for the simplest binaries. The purpose of this study is to go from zero to one: that is, to establish that recompilation is possible, and to lay the groundwork for later studies that will show it can be done fully automatically at scale. We will do this leveraging technologies from binary lifting and recompilation, which exist in potential but have not been applied to the problem of recompiling to CHERI.