ZEPHYR SOFTWARE LLC — Department of Defense SBIR Phase II: OSD11-IA5
ZEPHYR SOFTWARE LLC — SBIR Phase II award from Department of Defense.
- Amount
- $863,602
- Agency
- Department of Defense · Office of the Secretary of Defense
- Program / Phase
- SBIR · Phase II
- Topic
- OSD11-IA5
- Solicitation
- 2011.3
- NAICS
- —
- Place of performance
- VA
- Period
- 2014-05-23 → 2016-05-23
Description
To hijack the execution of a program, an attacker must overwrite the value of a return address or a function pointer (broadly defined). To prevent program hijacking, our product will provide a layered defense of these two targets, including deterministic and randomization defenses, with the ability in many cases to continue execution after a hijacking attempt is prevented. Our product toolkit includes static analysis of the program binary to be protected (no source code required) and dynamic monitoring using virtual machine technology after deployment. The randomization defense can be used to provide artificial software diversity.