TULIP TREE TECHNOLOGY LLC — Department of Defense SBIR Phase II: HR0011SB20224-16
TULIP TREE TECHNOLOGY LLC — SBIR Phase II award from Department of Defense.
- Amount
- $1,499,832
- Agency
- Department of Defense · Defense Advanced Research Projects Agency
- Program / Phase
- SBIR · Phase II
- Topic
- HR0011SB20224-16
- Solicitation
- 22.4
- NAICS
- —
- Place of performance
- FL
- Period
- 2023-03-31 → 2025-04-02
Description
For Phase 2 of this effort, Tulip Tree Technology, LLC proposes to create the CVE identification tool, Warren. Warren will take in a set of firmwares and script that can throw a payload to exercise a given CVE. It will run those firmwares in our proprietary analytical emulation environment Emerson. Once each target is running, Warren will throw the proof-of-concept exploit at each running instance. Emerson will then detect any vulnerable actions taken by the firmware and report them back to the Warren framework. Finally, Warren will collect all the results and prepare a report for the end user. All of this will take place in a cloud environment to enable users to scale their efforts.