DARPA Program Aims to Create System Design-Level Cybersecurity Approaches

DARPA Program Aims to Create System Design-Level Cybersecurity Approaches
DARPA Program

The Defense Advanced Research Projects Agency (DARPA) has launched a program that aims to help developers understand emergent behavior in computers to prevent cyber attackers from generating malicious and unintended computations using already embedded features of critical systems.

DARPA is seeking interested proposers for the Hardening Development Toolchains Against Emergent Execution Engines initiative to study theories and approaches and develop tools for mitigating emergent software behaviors throughout the software development phase where they are usually overlooked, the agency said Wednesday.

The HARDEN effort seeks to address the current process of system designers unknowingly enabling emergent behaviors because of their focus on ensuring a software can perform its task, taking away time to consider what unexpected conduct it could exhibit.

Aside from theory analysis and tool development, participants will explore methods to disrupt the exploit execution engine located at the design level that causes a system to act awry and apply such ideas to concrete technological use cases of integrated software.

“We want to ensure we’re creating models that will be of actual use to critical defense systems,” said Sergey Bratus, a program manager in DARPA's Information Innovation Office.

The agency plans to discuss the program with potential offerors at a virtual meeting scheduled for Thursday.

ExecutiveBiz, sister site of ExecutiveGov, will host a forum about supply chain cybersecurity. Visit the EBiz Events page to register for this timely forum and view other upcoming events for the GovCon community.

You may also be interested in...

Robert Wood

Robert Wood: CMS to Adopt Security-Oriented Standard for Software Bill of Materials

Robert Wood, chief information security officer at the Centers for Medicare and Medicaid Services (CMS), said that the CMS has started to lay the groundwork for how the agency incorporates a security-oriented software bill of materials into information systems, Nextgov reported Friday.