SBIR/STTR Research Award
Firmware-based microelectronics inoculation of legacy and new systems to detect, protect and defend against cybersecurity and supply chain attacks throughout the lifecycle
Award amount
$1,793,000Program and phase
SBIR · Phase II – Direct to Phase IIAward year
2024Award details
- Awarding agency
- Department of Defense
- Branch
- Air Force
- Recipient company
- CLOUD TANK INC
- Proposal award date
- 2024-08-20
- Contract end date
- 2026-08-20
- UEI
- R73YJXUQ15J7
- Solicitation number
- 24.1
- Topic code
- AF241-D022
Research abstract
The entire compute install base is today vulnerable to both destructive cybersecurity attacks (software attacks coming from the network including ransomware) and supply chain attacks (physical attacks injecting undetectable rootkits in microelectronics silicon, packaging, components, etc.). Cybersecurity attacks can result in physical destruction of platform hardware components (permanent denial of service) or corruption of the data stored in the platform (e.g., ransomware attacks). Supply chain attacks (via undetectable rootkits) can result in attackers taking full control of the system remotely (by bypassing all the hardware and software security protections) and spying/stealing of any data on the system. Currently there is no solution on the market that can prevent 0-day destructive cybersecurity attacks (only known to attackers) against compute install base including critical infrastructure. Also, currently there is no solution on the market that can detect rootkits injected into microelectronics silicon or packaging during the supply chain including post deployment. Cloud Tank Inc. is a company that provides premium security services to customers centered around hardware physical security (manufacturing, supply chain and post-deployment in cloud, edge, and enterprise) and cybersecurity (preventing software attacks coming from the network post-deployment). The company also performs research in the field of software, hardware, and supply chain security vulnerabilities, and has identified multiple classes of critical security vulnerabilities in microelectronics, platforms, manufacturing, and supply chain. Cloud Tank Inc. developed revolutionary technologies that prevent destructive cybersecurity attacks and detect and detect hardware security attacks (supply chain attacks) via inoculation on existing and future microelectronics. Cloud Tank Secureware is a revolutionary collection of technologies that can protect against both known and most importantly unknown cybersecurity destructive attacks (permanent physical damage to platform components and corruption of storage code and data (ransomware attacks)) and supply chain attacks that install silicon rootkits on the critically important installed base without requiring any hardware upgrades or any mainstream software recompilation (applications, operating systems, hypervisors) via a platform firmware update within minutes, thus representing a fundamental capability for protecting the United States critical infrastructure in case of cybersecurity warfare. Cloud Tank Inc. technologies will be incorporated into baseline client, enterprise, server and edge microelectronics via microelectronics firmware (process called inoculation) in order to create secure microelectronics that provide protection against multiple classes of software, physical and supply chain attacks.
Technology keywords
Not reported