BLUERISC INC — Department of Homeland Security SBIR Phase II: H-SB014.2-002
BLUERISC INC — SBIR Phase II award from Department of Homeland Security.
- Amount
- $749,952
- Agency
- Department of Homeland Security
- Program / Phase
- SBIR · Phase II
- Topic
- H-SB014.2-002
- Solicitation
- HSHQDC-14-R-00035
- NAICS
- —
- Place of performance
- MA
- Period
- 2015-09-09 → 2017-09-23
Description
BlueRISC's proposed solution provides a fundamentally new approach to enable autonomous detection of exploitation attempts as well as healing of silent vulnerabilities. It follows a hybrid approach consisting of (i) new static silent vulnerability point and associated path pre-characterization concepts, and (ii) the insertion of minimal and low-overhead runtime support enabled by the vulnerability characterization framework to enable validation, detection and healing at runtime. As opposed to other solutions, which rely on an attacker successfully injecting functionality in order to detect, this solution is also able to detect the exploitation of silent vulnerabilities, which leak information without modifying the system. The solution is CPU and operating system agnostic and thus widely applicable. Initial sectors that will be targeted include the critical infrastructure Energy Sector and the Defense Industrial Base Sector.