METRONOME SOFTWARE, LLC — Department of Defense SBIR Phase I: ABSTRACT: Metronome Software and Raytheon propose the development of Metronome"s CLO

Description

ABSTRACT: Metronome Software and Raytheon propose the development of Metronome"s CLOud-Access LocK (CLOAK) system. CLOAK provides a comprehensive set of proven attestation methodologies, attesting the Remote Assets from the lowest network layer, through the Operating System (OS, Kernel) layer, and through the Application layer. These methodologies include: attesting Remote Assets at the network layer via Public Key Infrastructure (PKI) methods in Data-In-Transit (DIT); attesting Remote Assets"Health via beyond-PKI Challenge-Response Authentication; attesting the OS layer via profiling; and attesting the Application layer via Software-Based Attestation (SBA). Ultimately, CLOAK provides the ability to ensure that only trustworthy processes are running on a mobile endpoint. CLOAK is also capable of operating with Raytheon"s Cross-Domain Solution (CDS), in which the credentials verified during secure DIT operations are utilized by the CDS system to determine ad control cross-domain operations. BENEFIT: Through Metronome Software"s CLOAK, the Government will have the capability for secure attestation to remote assets regardless of which"compartment"on the mobile device initiates or receives the connection request. These attestations provide assurance that the underlying system maintains its trusted state. Metronome and Raytheon envision the productizaton of CLOAK in Raytheon"s multiple programs of record. The success of CLOAK proven with its operations in these programs will become the springboard for wider deployments.