SBIR/STTR Research Award

Firmware-based microelectronics inoculation of legacy and new systems to detect, protect and defend against cybersecurity and supply chain attacks throughout the lifecycle

Award identifier 7d28bf1d2ce732a92581cdec5a33d686c26292615a5f39a463a50f7def229091Awarding agency Department of Defense · Air Force

Award amount

$1,793,000

Program and phase

SBIR · Phase II – Direct to Phase II

Award year

2024

Explore This Research Award in CaptureIQ

Research the technology, evaluate the recipient and agency, identify related opportunities, and explore potential follow-on work with CaptureIQ.

Award details

Awarding agency
Department of Defense
Branch
Air Force
Recipient company
CLOUD TANK INC
Proposal award date
2024-08-20
Contract end date
2026-08-20
UEI
R73YJXUQ15J7
Solicitation number
24.1
Topic code
AF241-D022

Research abstract

The entire compute install base is today vulnerable to both destructive cybersecurity attacks (software attacks coming from the network including ransomware) and supply chain attacks (physical attacks injecting undetectable rootkits in microelectronics silicon, packaging, components, etc.). Cybersecurity attacks can result in physical destruction of platform hardware components (permanent denial of service) or corruption of the data stored in the platform (e.g., ransomware attacks). Supply chain attacks (via undetectable rootkits) can result in attackers taking full control of the system remotely (by bypassing all the hardware and software security protections) and spying/stealing of any data on the system. Currently there is no solution on the market that can prevent 0-day destructive cybersecurity attacks (only known to attackers) against compute install base including critical infrastructure. Also, currently there is no solution on the market that can detect rootkits injected into microelectronics silicon or packaging during the supply chain including post deployment. Cloud Tank Inc. is a company that provides premium security services to customers centered around hardware physical security (manufacturing, supply chain and post-deployment in cloud, edge, and enterprise) and cybersecurity (preventing software attacks coming from the network post-deployment). The company also performs research in the field of software, hardware, and supply chain security vulnerabilities, and has identified multiple classes of critical security vulnerabilities in microelectronics, platforms, manufacturing, and supply chain. Cloud Tank Inc. developed revolutionary technologies that prevent destructive cybersecurity attacks and detect and detect hardware security attacks (supply chain attacks) via inoculation on existing and future microelectronics. Cloud Tank Secureware is a revolutionary collection of technologies that can protect against both known and most importantly unknown cybersecurity destructive attacks (permanent physical damage to platform components and corruption of storage code and data (ransomware attacks)) and supply chain attacks that install silicon rootkits on the critically important installed base without requiring any hardware upgrades or any mainstream software recompilation (applications, operating systems, hypervisors) via a platform firmware update within minutes, thus representing a fundamental capability for protecting the United States critical infrastructure in case of cybersecurity warfare. Cloud Tank Inc. technologies will be incorporated into baseline client, enterprise, server and edge microelectronics via microelectronics firmware (process called inoculation) in order to create secure microelectronics that provide protection against multiple classes of software, physical and supply chain attacks.

Technology keywords

Not reported

Agency intelligence

Department of Defense

Back to SBIR/STTR Research Awards

Don't take our word for it. Ask AI about RFPCapture.

See what leading AI assistants have to say about RFPCapture and CaptureIQ.

Gemini opens without a prefilled question. The question is copied to your clipboard when the button works. You can also copy it here:

What is RFPCapture.com and its CaptureIQ platform from Smart Logic AI? How does it help federal contractors discover opportunities, evaluate bid/no-bid decisions, research government contracts, and prepare proposals? How does it compare with other federal capture platforms? Use independent sources where available.