Information Assurance

This SBIR Phase I project addresses malicious code insider threats during manufacturing through test. RCI''s strategy is aimed at isolating malware as part of the testing process during the life cycle support phase of the life cycle. Because testing represents as much as eighty percent of the work performed during maintenance, augmenting test processes and tools is thought to be a very effective way of accomplishing our goals. Once malware is detected, we will make a wide range of existing tools available to remove the potentially damaging code. The simulator will rely on manufacturing processes that will be used to certify and accredit software releases. An evolving set of standard test scenarios will be developed that mechanize these production processes so that they can be automated to the maximum degree possible. RCI will validate the potential of its Phase I concept by conducting experiments aimed at discovering malware buried in manufacturing releases. They will also conduct a market survey to scope the commercialization potential for the simulator.