DARPA to create provably-secure software
Get a powerful Linux Dual-Core dedicated server for less than $2.67 a day!Tweet Share on Twitter.
October 2, 2014
The United States' military development arm DARPA (Defense Advanced Research Projects Agency) wants to create provably-secure software that will help the average person keep information private and hopefully secure.
According to Threatpost, DARPA director Arati Prabhakar told a Washington Post security conference that embedded systems are among the kinds of applications for which it's feasible to create such operating systems.
As the Department of Defense's write-up of the speech, Prabhakar described the new initiative as seeking a mathematical proof that this particular function can't be hacked from a pathway that wasn't intended.
That won't solve the entire issue, but it might make it more manageable. The scale of a desktop operating system makes “provably secure” a rather complex goal, but she told the conference that it's feasible “for embedded systems with a modest number of lines of code to achieve such a feat”.
It's a fair bet that Australia's NICTA will be taking a keen interest in the project. That group developed a provably secure microkernel which it spun off into a company called OK Labs, acquired in 2012 by General Dynamics.
In July of this year, NICTA open-sourced the code for its SeL 4 microkernel, identifying DARPA among the software's users and contributors.
At the WashPo conference, Prabhakar also highlighted the Grand Cyber Challenge DARPA plans for 2016. For that event, she said DARPA has created a purpose-built operating system-- “It’s a separate environment with a new OS. We’re creating a league of their own for machines to fight it out”, she said, with 90 teams already registered to try their hand at the capture-the-flag contest.
The catch here is that contestants have to defend networks against high-speed threats without human interaction, because she said DARPA wants “to get to where we can do cybersecurity defence at machine speed”.
Source: The U.S. Defense Advanced Research Projects Agency.
Get a powerful Linux Dual-Core dedicated server for less than $2.67 a day!