This $9 million contract will enable the Systems Analysis and Exploitation (SAE) Team, along with teaming partners Cummins Incorporated, Colorado State University and GRIMM, to develop challenge problems and evaluate performer’s solutions to problems related to heavy-duty engine systems.
This contract is in support of the DARPA/I2O Assured Micropatching (AMP) program, which aims to develop solutions capable of rapidly producing and deploying embedded system security patches. AIS will seed vulnerabilities throughout embedded systems, guide other performers on the challenge of addressing them and verify successful patching. The goal of the other AMP program performers is to identify those vulnerabilities and patch them without replacing all of the software on the device.
Projected challenge problems and testbed development will focus on devices commonly used to support heavy-duty engine systems used in the trucking industry, marine, power generation and military ground vehicle systems. This is a focus area AIS is not only very interested in, but one in which we have the experience necessary to develop the required challenge problems. The devices we will be working with support automotive and heavy trucking. We’ll take a computer that can be inserted into a truck and drop a vulnerability into it. Then, we will verify that the solutions provided by the other performers address the vulnerability and do not impact the normal operation of the system.
While this initiative is focused on the target space of automotive and heavy trucks, the same engine controllers are also in use in military systems, expanding the application of our efforts to the government.
This is a direct result of AIS putting in the effort, learning the customer and the technology space, and building relationships. We cannot wait to get our hands dirty and work on the AMP program and start playing with trucks.
*The views, opinions, and/or findings expressed are those of the author(s) and should not be interpreted as representing the official views or policies of the Department of Defense or the U.S. Government.
Approved for Public Release, Distribution Unlimited.
