BLUERISC INC — Department of Defense SBIR Phase I: N152-120

Description

BlueRISCs proposed solution takes the form of a binary-level toolkit whose goal is to create implicitly brittle software with fast crash properties. The approach performs static analysis at the binary-level (i.e. no source code required) as well as associated transformations aimed at breaking fundamental assumptions regarding inter-procedural data flow as well as code layout and control-flow. These techniques are coupled with the proposed fast-crash decoy codes and flow check codes which are strategically inserted at places in the binary upon launch to enable timely control-flow change to a handler upon software crash, minimizing the time-to-crash. This concept of transforming a binary, both statically as well as dynamically, to implicitly break the assumptions required by an attacker for exploitation and enable a timely, implicit detection is the backbone of the proposed brittle software creation solution.