Integrating Cyber Kevlar Tools into DevSecOps Overmatch Software Armory

Naval Information Warfare’s (NAVWAR’s) Overmatch Software Armory (OSA) is a well-established Navy development, security and operations (DevSecOps) platform to deliver secure applications more rapidly. OSA is leveraging the Navy’s Cyber Kevlar (CK) tools to further debloat and harden software and containers. Navy CK tools are new, innovative capabilities that embrace the Navy’s Cyber Ready philosophy by going above and beyond the typical approach to security by transforming and reducing the attack surface of software, containers and systems. Moreover, CK tools produce smaller sizes of containerized applications which require less bandwidth at the tactical edge. CK tools are products from the Office of Naval Research (ONR) Initial Naval Prototype (INP) project called Total Platform Cyber Protection (TPCP), which included the maturation of technology sponsored by ONR within academia to remove unused code and unwanted features from software as well as debloat and harden containers. To facilitate successful transition of selected CK tools into OSA, in this effort, P&J Robinson Corporation (PJR) proposes to work with NAVWAR to continue the effort of maturation, containerization, development, deployment, integration, automation and evaluation of selected CK/TPCP tools into OSA. The final output of this proposed effort will be a suite of software debloating tools that have been matured, customized, and transitioned to target DoD applications and environments.