Vulnerability Identification and Program Exploitation Repair

To address the Navyís need for an automated tool to innovatively find and fix software vulnerabilities in binaries without source code, Intellisense Systems, Inc. (Intellisense) proposes to develop a new Vulnerability Identification and Program Exploitation Repair (VIPER) tool based on an innovation in sandboxed quantitative binary integrity analytics coupled with qualitative artificial intelligence (AI)-based code execution anomaly detection. This innovation enables VIPER to automatically perform security assessments on compiled binaries. This innovative leap is rooted in vulnerability coherency that occurs with malicious attributes. In much the same way that human intuition is derived from a coherent set of sensory stimuli resulting in insights or hunches, VIPERís AI solution uses the binary integrity analytics to comprehensively consider the binary, metadata, and historical datasets to identify malicious code coherency. Using this approach, the Phase I work will establish a baseline success rate leading to a high confidence roadmap to achieving >90% success rate in detecting known and unknown vulnerabilities by the conclusion of Phase II. In Phase I, Intellisense will identify major challenges to performing find-and-fix of vulnerabilities and mitigate the challenges. We will refine the concept established in the proposal using a combination of traditional and AI-assisted analyses. Through the use of these interdependent analysis methodologies we will then develop initial algorithms for demonstrating preliminary feasibility of the VIPER solution. Based on the outcome, we will develop initial Phase II plans, including a roadmap to achieving the target success rate and targeting additional instruction sets. In Phase I Option, if awarded, Intellisense will continue to develop and refine our algorithms, as well as define a test and validation infrastructure for Phase II prototyping. In Phase II, Intellisense plans to develop and demonstrate prototype VIPER solutions with enhanced algorithms for vulnerability identification and patching through automated find-and-fix features. This will lead to demonstration of the VIPER prototypeís ability to harden vulnerable binary software and a roadmap for transitioning the technology through Phase III.