Information Assurance

Insider threat has been an increasingly important problem given low employee morale in today’s tight economy and the increasing reliance on third-party software (including COTS components) that are generally only available in machine-code form and are in many cases produced oversees. We believe that a key to addressing the problem of insider threat is the use of powerful program analyses in order to automate and simplify the jobs of security analysts as much as possible. Further, we believe that no solution to the problem of insider threat is complete, unless it addresses the possibility of insider attacks embedded in COTS components. We propose to build on several GrammaTech technologies for static and dynamic program analysis in an effort to identify insider threat in source code, as well as in machine code.